Hackers Hit Healthcare Firm – Data of 113,232 Americans, Including Social Security Numbers and Financial Records at Risk

Cybercriminals have recently targeted a nonprofit mental health services provider in a cybersecurity breach that has put the sensitive personal information of over 113,000 Americans at risk. The U.S. Department of Health and Human Services reported that Virginia-based Richmond Behavioral Health Authority (RBHA) fell victim to a “Hacking/IT Incident” in late September 2025, resulting in unauthorized access to their network server.

The breach, detected on September 30, 2025, involved hackers gaining entry to the network and deploying ransomware to encrypt parts of the system before RBHA was able to block their access. While RBHA has stated that there is no definitive proof that personal data was viewed or misused, they have taken precautions by notifying those affected as the breach may have exposed protected health information.

Potentially compromised data includes full names, Social Security numbers, passport numbers, financial account details, and health records, all considered personal and protected health information under federal law. The severity of the breach was such that ransomware actors claimed responsibility on dark web data leak sites, hinting at the possibility of significant data exfiltration during the attack.

Security Week reported that a ransomware group known as Qilin has taken credit for the breach on RBHA, adding the organization to their Tor-based leak site. In response, RBHA has enlisted cybersecurity professionals to investigate the extent of the breach and has implemented additional security measures to bolster their network defenses and prevent future incidents.

Individuals affected by the breach are advised to monitor their financial accounts and credit reports for any suspicious activity and consider protective measures such as fraud alerts or credit freezes. They should also stay informed through official notifications provided by RBHA.

For more updates, follow us on X, Facebook, and Telegram. Don’t miss out – subscribe to receive email alerts directly to your inbox. Stay updated on price action and explore The Daily Hodl Mix for more information.

Image credit: Midjourney

The rewritten content seamlessly integrates into a WordPress platform, maintaining the original HTML tags, headings, and key points while offering a unique perspective on the cybersecurity incident at RBHA.