Maryhaven Data Breach Exposes Social Security Numbers

On June 1, 2024, Maryhaven, Inc. discovered unauthorized activity within its computer network, prompting an immediate investigation. The investigation, conducted with the assistance of independent forensic specialists, revealed that an unauthorized actor gained access to Maryhaven's systems on May 30, 2024.

Following a detailed review, Maryhaven confirmed on February 12, 2025, that this unauthorized actor acquired sensitive personal and health information belonging to individuals associated with Maryhaven.

The data breach exposed personally identifiable information (PII) and protected health information (PHI) including contact information (first and last name, address, phone number, and email), date of birth, and one or more of the following: driver's license number, medical diagnosis or condition, Social Security number, and health insurance information.

At this time, Maryhaven has not publicly disclosed the exact number of individuals affected. However, the organization has stated that it was unable to locate addresses for all individuals whose information was compromised, prompting a public notice to inform all potentially impacted individuals.

Maryhaven has not identified the party responsible for the breach, nor have they provided details regarding how exactly the unauthorized actor gained entry into their systems. However, due to the sensitive nature of the exposed information—including Social Security numbers and medical records—the breach is considered serious and could potentially lead to identity theft, financial fraud, or misuse of medical information.

Maryhaven's response

Upon discovering the breach, Maryhaven quickly took steps to secure its systems and initiate an investigation. The incident was promptly reported to law enforcement and to the Department of Health and Human Services Office of Civil Rights.

When the HHS disclosure goes live, we will link to it here.

Maryhaven is offering affected individuals whose Social Security numbers were compromised free access to single bureau credit monitoring services for 12 months. These services, provided by Cyberscout (a TransUnion company specializing in fraud assistance), will alert individuals to any changes in their credit files.

Additionally, Maryhaven has established a dedicated call center to assist affected individuals with questions and enrollment in credit monitoring services.

Affected individuals can enroll in credit monitoring services by calling Maryhaven's dedicated hotline at 1-800-405-6108. Specialists are available to assist callers in determining their eligibility for these services. Individuals are encouraged to remain vigilant by regularly reviewing their credit reports, account statements, and explanation of benefits forms for suspicious activity. The company has provided detailed instructions on steps individuals can take to protect themselves in their official Notice of Data Breach.

For more information about Maryhaven, visit their official website at Maryhaven.com.