Posted On July 6, 2022 Consumer Privacy & Data Breaches
July 6, 2022 – Carolina Behavioral Health Alliance, LLC reported a data breach after the company was targeted in a recent cybersecurity attack. As a result of the breach, the Name, Address, Health Plan ID#, Gender, and Social Security Number of certain individuals was compromised. The number of individuals affected by the Carolina Behavioral Health data breach has not been released. On July 1, 2022, Carolina Behavioral Health sent out data breach letters to those individuals whose information was affected by the breach.
The data breach lawyers at Console & Associates, P.C. are going to begin interviewing victims of the breach to determine what damages they sustained and what legal claims may be available to them. If you recently received a NOTICE OF DATA BREACH from Carolina Behavioral Health Alliance, LLC, contact us at (866) 778-5500 to discuss your legal options, or submit a confidential contact form for a free case evaluation.
Below is a portion of the letter that Carolina Behavioral Health Alliance, LLC sent to individuals affected by the data breach:
Carolina Behavioral Health Alliance, LLC (CBHA) is a third-party administrator which is contracted with [Redacted] to manage certain medical benefits for individuals. We are writing in order to inform you of an incident that may have involved your personal information. We take the security of your information seriously, and want to provide you with information and resources you can use to protect your information.
What Happened and What Information Was Involved:
On March 20, 2022, we detected and stopped a sophisticated ransomware attack, in which an unauthorized third party accessed and disabled some of CBHA’s computer systems. We immediately engaged third-party forensic firms to assist us with securing the network environment and investigating the extent of any unauthorized activity. We also notified law enforcement.
Our investigation determined an unauthorized third party may have accessed certain individual personal information during this incident on March 19, 2022 and March 20, 2022. We advised [Redacted] of this incident on May 9, 2022 and have been working diligently to identify which individuals and what information were potentially impacted.
We found no evidence that your information has been misused; however, it is possible that the following information could have been accessed by an unauthorized third party: Name, Address, Health Plan ID#, Gender, SSN.
What We Are Doing:
Data security is one of our highest priorities. Upon detecting this incident, we moved quickly to initiate a response, which included conducting an investigation with the assistance of IT specialists and confirming the security of our network environment. We also wiped and rebuilt affected systems and have taken steps to bolster our network security. We also reviewed and altered our policies, procedures and network security software relating to the security of our systems and servers, as well as how we store and manage data.
What You Can Do:
We are providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score* services at no charge. These services provide you with alerts for twenty-four months from the date of enrollment when changes occur to your credit file. This notification is sent to you the same day that the change or update takes place with the bureau. Finally, we are providing you with proactive fraud assistance to help with any questions that you might have or in event that you become a victim of fraud. These services will be provided by Cyberscout through Identity Force, a company specializing in fraud assistance and remediation services.
To enroll in credit monitoring services at no charge, please log on to [Redacted] and follow the instructions provided. When prompted, please provide the following unique code to receive services: 5PG8XZC7KE Cyberscout is available to answer questions or concerns you may have regarding protection of your personal information at the number below. Please note the deadline to enroll is October 3, 2022. We encourage you to take full advantage of this service offering
Enclosed you will find additional information regarding the resources available to you and the steps that you can take to further protect your information.
For More Information:
We recognize that you may have questions not addressed in this letter. If you have additional questions, please call our dedicated, toll-free call center at 1-877-514-7764, Monday through Friday, 8:00 am to 8:00 pm Eastern time, excluding holidays. Representatives will be available for 90 days.
We value the security of the personal data that we maintain and we sincerely regret any frustration, concern, and inconvenience that this incident may have caused.