.png)
Behavioral Health Resources Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Behavioral Health Resources data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
Who is Behavioral Health Resources?
Behavioral Health Resources (BHR) operates across multiple counties in Washington, offering a programs for individuals, children, youth, and families who are seeking support for mental health conditions or substance use issues.
BHR has been operating since 1956 and is known as South Puget Sound’s largest comprehensive provider of behavioral health and substance abuse disorder treatment. Their services include school-based programs, education initiatives, and specialized facilities like Harvest Home, a residential treatment center for pregnant and parenting women struggling with substance use disorders and behavioral health challenges.
What Happened?
In November 2024, Behavioral Health Resources discovered suspicious activity in their computer systems. On or before November 20, 2024, an unauthorized actor gained access to certain systems containing sensitive information. While the investigation did not confirm whether any data was viewed or taken, a thorough review determined that information was accessible and potentially exposed.
BHR disclosed the breach to regulators and began notifying affected individuals in January 2025, with written notices mailed in April 2025. In total, 50,083 people in the United States were affected, including four in Maine.
What information was exposed?
- Personally identifiable information (PII)
- Full name (including maiden name)
- Address
- Date of birth
- Social Security number
- Telephone and/or fax number
- Full face photographic image
- Birth and/or marriage certificate
- Tribal ID
- Government-issued ID
- Taxpayer identification number (TIN)
- Electronic/digital signature
- Financial institution name
- Protected Health information (PHI)
- Medical record number
- Health plan beneficiary number
- Account number
- Certificate/license number
- Biometric and/or genetic data
- Medical billing information
- Medical information (diagnosis, condition, treatment, lab results, provider name, physician, patient ID, medication information, admission date, discharge date, treatment cost, date of death)
- Other health-related information and incidental health references
- Health insurance information
How can I protect myself?
If you received a notice from Behavioral Health Resources or believe you may have been affected, there are important steps you can take:
- Monitor your bank, credit, and health insurance accounts for suspicious activity or unauthorized charges.
- Request your free credit reports from Equifax, Experian, and TransUnion.
- Consider placing a fraud alert on your credit file. This is free and requires businesses to verify your identity before issuing new credit.
- You can also place a credit freeze on your credit reports, which restricts access to your credit file and helps prevent new accounts from being opened in your name.
- Report any suspicious activity to your financial institutions, healthcare providers, or insurance companies right away.
You May Be Entitled to Compensation
If your information was exposed in the Behavioral Health Resources data breach, you may have the right to seek compensation for any harm or inconvenience you have experienced. Lawyers are ready to help you understand your options and pursue a claim.
To find out if you qualify to join a lawsuit related to this data breach, complete the below form. This is a no-cost, no-obligation way to get started and protect your rights.
.svg)