Hackers Hit Healthcare Firm – Data of 113,232 Americans, Including Social Security Numbers and Financial Records at Risk

Hackers have targeted a nonprofit mental health services provider in a cybersecurity incident that may have exposed sensitive personal information for at least 113,232 Americans.

According to the U.S. Department of Health and Human Services, the breach at Virginia-based Richmond Behavioral Health Authority (RBHA) was reported as a “Hacking/IT Incident” and affected over 113,000 people when RBHA’s network server was compromised in a late-September 2025 attack.

The unauthorized access was detected on September 30, 2025, after hackers gained entry to the network and deployed ransomware that encrypted portions of the system before RBHA terminated the attackers’ access.

RBHA’s official breach notice says there is currently no “definitive evidence” that personal data was actually viewed or misused, but the organization has notified affected individuals out of an abundance of caution because the intrusion may have exposed protected health information.

Potentially accessed data includes full names, Social Security numbers, passport numbers, financial account information, and health records, all of which are categorized as personal and protected health information under federal law.

The breach was significant enough that ransomware actors claimed responsibility on dark web data leak sites, suggesting that substantial volumes of data may have been exfiltrated during the attack.

According to a report from Security Week, a ransomware group named Qilin took credit for the attack on RBHA when it added the firm to its Tor-based leak site.

RBHA has since hired cybersecurity experts and initiated an investigation to determine the scope of the compromise, and implemented additional safeguards to improve its network defenses and prevent future incidents.

Impacted individuals are being advised to monitor financial accounts and credit reports for suspicious activity and to consider protective actions such as fraud alerts or credit freezes while staying informed through official notifications.

Generated Image: Midjourney