Industry - Lawsuit
Executive Summary
Bradford Health Services, an Alabama-based addiction treatment and mental health provider operating 28 facilities nationwide, has settled a class action lawsuit stemming from a December 2023 data breach. The breach, detected through unusual network activity, exposed personal information including names, Social Security numbers, driver's license numbers, and dates of birth of patients who received treatment services. The settlement resolves legal claims related to the unauthorized access of pr...
What Happened
Bradford Health Services, an Alabama-based addiction treatment and mental health provider operating 28 facilities nationwide, experienced a data breach in December 2023 when unusual network activity was detected on December 8. An investigation with external cybersecurity experts confirmed that unauthorized access occurred, compromising personal information including names, Social Security numbers, driver's license numbers, and dates of birth of patients who received treatment services. The company completed its review of affected individuals on May 15, 2025, and has now settled a class action lawsuit related to the breach.
Who Is Affected
Patients who received addiction treatment, mental health services, or rehabilitation care at any of Bradford Health Services' 28 facilities across the United States are affected. The breach exposed highly sensitive personal information that could be used for identity theft, along with protected health information related to substance abuse and mental health treatment, which carries particular stigma and privacy concerns.
Why It Matters
This breach is significant because it involves a vulnerable patient population seeking addiction and mental health treatment, where privacy is especially critical due to social stigma and potential discrimination. The 17-month gap between breach detection in December 2023 and completion of the affected individual review in May 2025 demonstrates the extended timeline often required to fully assess healthcare data breach impacts. The settlement establishes accountability for healthcare providers' duty to protect sensitive treatment information.
What You Should Do
If you received treatment at Bradford Health Services, monitor your credit reports closely and consider placing a fraud alert or credit freeze with the three major credit bureaus. Watch for signs of identity theft such as unfamiliar accounts or charges, and be alert to targeted phishing attempts that reference your treatment history. Review any settlement notice you receive from Bradford Health Services for information about compensation or credit monitoring services being offered.
Summary generated from verified sources and reviewed before publication. How we summarize.