On November 1, 2024, Mid-Ohio Psychological Services (“MOPS”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights (“HHS-OCR”) after discovering that an unauthorized party was able to access information that had been entrusted to the company. In this notice, MOPS explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, MOPS began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Mid-Ohio Psychological Services, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Mid-Ohio Psychological Services data breach. For more information, please see our recent piece on the topic here.
What Caused the Mid-Ohio Psychological Services Data Breach?
The Mid-Ohio Psychological Services data breach was only recently announced, and more information is expected in the near future. At this point, MOPS does not appear to have posted a website notice or issued a press release discussing the incident, and the company’s filing with the U.S. Department of Health and Human Services Office for Civil Rights provides only information on what led up to the breach.
However, based on the MOPS filing with the HHS-OCR, we know that the data breach stemmed from an “Unauthorized Access / Disclosure” of information that was stored on a network server. While it’s possible that this incident originated from within MOPS, it is also possible that MOPS is reporting the incident on behalf of a vendor. Either way, MOPS patient data was compromised as a result of the breach.
After learning that sensitive consumer data was accessible to an unauthorized party, Mid-Ohio Psychological Services reviewed the compromised files to determine what information was leaked and which consumers were impacted. MOPS recently completed this process, and on November 1, 2024, the company filed notice of the breach with the HHS-OCR. Typically, this is when companies send out personalized data breach notification letters to anyone who was affected by the breach; however, the timeline in the Mid-Ohio Psychological Services data breach could be different. Once sent out, these personalized data breach letters should provide victims with a list of the information that was compromised.
More Information About Mid-Ohio Psychological Services
Mid-Ohio Psychological Services is a healthcare services provider based out of Lancaster, Ohio. MOPS provides mental health services, substance abuse services, and other support services to individuals and community organizations. MOPS also offers professional development courses to those in the behavioral healthcare industry. Mid-Ohio Psychological Services employs more than 74 people and generates approximately $5 million in annual revenue.
