Southwest Behavioral Health Center
Disclosed Nov 9, 20232 years ago17,147 affectedConfirmed
The covered entity (CE), Southwest Behavioral Health Center, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 17,147 individuals. The PHI involved included names, Social Security numbers, dates of birth, diagnoses, medications, and other treatment information. The CE notified HHS and the affected individuals. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to further protect PHI. Staff were retrained.
What is known
| People affected | 17,147 (as reported to HHS) |
|---|---|
| Disclosed | Nov 9, 2023 |
| Happened | Mar 13, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Southwest Behavioral Health Centeroag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-11-09 Southwest Behavioral Health Center Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Southwest Behavioral Health Center (Healthcare Provider, UT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Nov 9, 2023 | |
| HHS archivetotal | Nov 13, 2023 | 17,147 |
| California AGresidents of CA | Nov 19, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 17147 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Southwest Behavioral Health Center, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 17,147 individuals. The PHI involved included names, Social Securit · backfill source
- 2026-09-25 · disclosed: 2023-11-19 to 2023-11-09 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.