Southwest Behavioral Health Center Breach

Southwest Behavioral Health Center (SBHC) is in Utah, with offices in St. George, Cedar City, Beaver, Kanab, and Panguitch. SBHC offers a comprehensive solution for self-help and crisis behaviors, including residential and outpatient programs. SBHC had an external system breach in March—over 17,000 may have information at risk for misuse.

What Was the Breach?

• Full Name
• Date of Birth
• Social Security Number
• Medical Information
• Personal Health Details

How Did the Breach Occur?

The published Incident Notice states the attack was a sophisticated cybersecurity event that impacted the SBHC network environment. How the assailants made the attack possible is unclear; however, based on the information apparent, the assault may have occurred by network hopping or a system vulnerability.

When Did This Breach Occur?

The breach occurred around March 13th, although there is a discrepancy regarding when SBHC discovered the event. Their consumer notice states officials found the event around that time, but the filing with the Maine Attorney General’s office suggests officials did not find the breach until September. Following their review, SBHC sent notifications around November 9th.

Who Does the Breach Impact?

According to the Maine Regulatory Notice, those who may feel the breach’s impact are associates of SBHC. Current and former clients, patients, and employees have all had their information put at risk. What specific data was accessed varies between individuals and their relationship with SBHC.

How Many Files Does the Breach Affect?

The Maine Attorney General’s website breach filing lists the expected impact of at least 17,147 records. The figure is not likely to grow, but those with exposed information should consider identity monitoring and fraud alerts.