HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of July 27, 2020.
- Organization as reported
- Behavioral Health Network, Inc., MA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 27, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12770, row:3909)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Behavioral Health Network, Inc., reported that it was the victim of a malware attack affecting the electronic protected health information (ePHI) of 129,571 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, clinical information, claims and health insurance information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring and identity protection services to affected individuals. In response to the breach, the CE implemented additional technical safeguards, and implemented a cybersecurity committee to regularly review and implement changes as needed. OCR obtained assurances that the CE implemented the corrective actions noted.