In early October 2024, Colonial Behavioral Health (CBH) identified a ransomware incident affecting its IT systems. The organization promptly engaged external cybersecurity experts and notified law enforcement, including the FBI and the Department of Homeland Security.
Despite disruptions, CBH maintained patient care and launched an investigation revealing that unauthorized access began on May 17, 2024. Sensitive information may have been accessed or obtained before the ransomware encryption on October 4, 2024. Affected individuals are being provided with free credit monitoring and identity protection services, along with a comprehensive guide to safeguard their information.
What Information Was Involved?
The investigation determined that potentially accessed data includes personal identifying and health information. This may consist of demographic details such as names, Social Security numbers, addresses, and driver’s license numbers, as well as clinical records like diagnoses, lab results, medications, and treatment history. Insurance and claims information or details about guarantors who paid for healthcare services may also have been affected. The exact data impacted varies for each individual.
