Mt. Carmel Behavioral Healthcare reports data breach caused by phishing attack
Learn More
Mt. Carmel Behavioral Healthcare LLC (MCBH) is reporting a data breach following the discovery of unauthorized access to an employee email account.
MCBH is a behavioral health services provider based in Columbus, Ohio, offering treatment for mental health conditions such as anxiety, depression, PTSD, and substance use disorders.
MCBH became aware of the unauthorized access to the email account on June 12, 2024. The company secured the affected email account and launched a full investigation, supported by third-party cybersecurity experts. The investigation confirmed that an unauthorized individual accessed the employee’s email account, including emails and attachments containing sensitive patient data.
This incident, which occurred between June 11 and June 12, 2024, allowed an unauthorized party to potentially access sensitive patient information. The compromised data may include the following:
-
Names
-
Social Security numbers
-
Dates of birth
-
Addresses
-
Medical record numbers
-
Patient account numbers
-
Health insurance information
-
Medical information
The total number of affected individuals has not yet been disclosed.
MCBH began notifying affected individuals of the breach between August 9 and August 30, 2024.
