2026 New Horizons Behavioral Health — PHI/PII (Jan 2026 access; newly detailed disclosure)
Data compromised
SSNs, financial data, medical records, diagnoses, prescriptions, insurance info, treatment details, names/addresses/DOB
Technical writeup
New Horizons Behavioral Health, a community behavioral health provider based in Columbus, Georgia, reported suspicious network activity and a confirmed multi-day unauthorized network intrusion between approximately January 15–18, 2026. The organization publicly disclosed the incident in March 2026; subsequent notices and third-party summaries expanded detail on data elements at risk. A full victim count remained pending while forensics continued. Exposed categories confirmed in materials included Social Security numbers, financial data, medical histories, diagnoses, prescriptions, treatment details, insurance information, and other personal identifiers—highly sensitive healthcare and identity data. Complimentary credit monitoring was offered as notifications proceeded.
Root cause
Unauthorized network access following suspicious activity