Ephrata, Pa.-based Retreat Behavioral Health, an addiction treatment center with locations across the East Coast, has filed a data breach notice with the state's Office of the Attorney General, JDSupra reported Jan. 5.
The center filed a notice to patients Dec. 30, according to the attorney general's website.
Retreat first detected a ransomware attack July 1, 2022, where an unauthorized third party accessed the organization's computer systems. The investigation of this attack did not conclude until Dec. 9, 2022.
There has been no evidence that patient information has been misused, according to the information submitted to the attorney general, but access to patient's addresses, Social Security numbers and possibly date of birth or medical history have been obtained. The organization also filed a notice with HHS.
The center said it is addressing the issue and is in contact with the Federal Bureau of Investigations. It has also employed additional monitoring tools, according to the notice filed with the attorney general's office.