Every public data breach

44 disclosed this week · 26,355 on record

Behavioral Health Partners of Metrowest

Disclosed May 11, 202211,288 affectedConfirmed

Official notice

The covered entity (CE), Behavioral Health Partners of Metrowest, reported that its business associate (BA) was the victim of cyber-attack affecting the protected health information (PHI) of 10,920 individuals. The PHI involved included names, addresses. Social Security and drivers’ license numbers, and claims information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE strengthened its administrative, technical, and security safeguards to better protect its PHI.

What is known

People affected11,288 (as reported by the organization)
DisclosedMay 11, 2022
HappenedSep 14, 2021
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
summary2026-09-25
empty to The covered entity (CE), Behavioral Health Partners of Metrowest, reported that its business associate (BA) was the victim of cyber-attack affecting the protected health information (PHI) of 10,920 individuals. The PHI involved included namby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Behavioral Health Partners of Metrowest