On August 11, 2023, Cummins Behavioral Health Systems, Inc. filed a notice of data breach with the Attorney General of Maine after confirming the company was the recent victim of a ransomware attack. In this notice, Cummins explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and Social Security numbers. Upon completing its investigation, Cummins began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Cummins Behavioral Health Systems, Inc., it is essential you understand what is at risk and what you can do about it. Ransomware attacks have become increasingly common, as they can be incredibly profitable for hackers. At the same time, these cyberattacks raise significant risks to consumers because if a company refuses to pay a ransom, hackers will either sell all stolen data or make it publicly available. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the Cummins Behavioral Health Systems data breach.

What Caused the Cummins Behavioral Health Systems Breach?

The Cummins Behavioral Health Systems data breach was only recently announced, and more information is expected in the near future. However, Cummins’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, on approximately March 9, 2023, Cummins Behavioral Health discovered a ransom note within its IT environment, which was placed by an unauthorized party. However, Cummins notes that, unlike the case with many ransomware attacks, the hackers did not encrypt the company’s files.

Regardless, in response to discovering the ransom letter, Cummins enlisted the help of third-party forensics specialists to conduct an investigation. Cummins also took steps to mitigate any impact. However, Cummins's investigation later confirmed that an unauthorized party had access to portions of its IT network between February 2, 2023 and March 9, 2023, including some files containing confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, Cummins Behavioral Health Systems reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name and Social Security number.

On August 11, 2023, Cummins Behavioral Health Systems sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Cummins Behavioral Health Systems, Inc.

Cummins Behavioral Health Systems, Inc. is a community behavioral health center based in Avon, Indiana. Cumming Behavioral Health provides a range of services, including individual therapy, group therapy, family therapy, psychiatric services, and substance use treatment to residents of Marion, Hendricks, Boone, Montgomery and Putnam counties. Cummins Behavioral Health Systems employs more than 363 people and generates approximately $25 million in annual revenue.