Largest US addiction treatment provider notifies patients of data breach

BayMark Health Services reported a cybersecurity incident that disrupted IT operations and resulted in unauthorized access to files containing sensitive patient information (names, SSNs, driver’s license numbers, dates of birth, insurance and treatment details) between Sept 24 and Oct 14, 2024. The RansomHub extortion group claimed responsibility and posted ~1.5 TB of exfiltrated data to its leak site; BayMark has engaged forensic partners, notified law enforcement, and is offering affected individuals free identity monitoring.