MHMR Authority of Brazos Valley
Disclosed Feb 28, 20233 years ago83,245 affectedConfirmed
The covered entity (CE), MHMR Authority of Brazos Valley, reported that it experienced a ransomware incident that affected the protected health information (PHI) of approximately 78,984 individuals who were patients of the CE. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, and diagnoses or conditions. The CE notified HHS, the affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE provided free credit monitoring to the affected individuals, and implemented additional administrative, technical, and security safeguards to better protect its PHI. During the investigation, OCR provided CE with technical assistance.
What is known
| People affected | 83,245 (as reported by the organization) |
|---|---|
| Disclosed | Feb 28, 2023 |
| Happened | Nov 5, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Government · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2023-07-28 MHMR Authority of Brazos Valley Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: MHMR Authority of Brazos Valleyin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): MHMR Authority of Brazos Valley (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Feb 28, 2023 | 78,984 |
| Vermont AGresidents of VT | Jul 28, 2023 | |
| Indiana AGresidents of IN | Jul 28, 2023 | 44 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2023-07-28 to 2023-02-28 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), MHMR Authority of Brazos Valley, reported that it experienced a ransomware incident that affected the protected health information (PHI) of approximately 78,984 individuals who were patients of the CE. The PHI invol · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 83245 · backfill source
- 2026-09-25 · occurred: empty to 2022-11-05 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.