The covered entity (CE), Heart of Texas Behavioral Health Network, reported that its office was burglarized and the protected health information (PHI) of 1,309 individuals was viewable. The PHI involved included clinical, demographic, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. OCR provided the CE with technical assistance regarding the HIPAA Rules.
What is known
People affected
1,309 (as reported to HHS)
Disclosed
Dec 10, 2025
Discovered
Nov 20, 2025
Attack
Insider
Data exposed
Social Security numbers, Health, Insurance, Dates of birth, Addresses, Names
2026-09-25 · attack: unknown to insider · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 1309 · backfill source
2026-09-25 · disclosed: 2025-12-22 to 2025-12-10 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Heart of Texas Behavioral Health Network, reported that its office was burglarized and the protected health information (PHI) of 1,309 individuals was viewable. The PHI involved included clinical, demographic, and f · backfill source
