Heart of Texas Behavioral Health Network

The Heart of Texas Behavioral Health Network (HOTBHN) experienced a significant data breach on October 22, 2023, which compromised the medical privacy of its current and former patients. An unauthorized party gained access to the nonprofit’s network, potentially exposing sensitive information including first and last names, birth dates, medical record numbers, health insurance policy numbers, and medical and treatment information. The specific data exposed varied from person to person. In response, HOTBHN has taken steps to secure its network and is providing written notices to those potentially affected, advising them on how to protect themselves and offering identity theft protection services at no charge. Despite the breach, HOTBHN has stated there is no evidence to suggest that any individual’s information has been misused as a result of the incident. A specialized third-party forensic incident response firm was hired to help secure the network and investigate the breach further[1].

Additionally, a Waco woman is seeking more than $1 million and class-action status for her lawsuit against HOTBHN over the personal data breach, indicating the legal ramifications and concerns of affected individuals[7].

This breach is part of a larger trend of healthcare data breaches, with HOTBHN being one of several healthcare providers affected by hacking incidents in December 2023. The breach at HOTBHN involved 63,776 individuals, making it a significant event among other healthcare data breaches reported in the same period[9].

Citations:

1. https://wacotrib.com/news/local/crime-courts/heart-of-texas-behavioral-health-network-warns-of-data-breach/article_5d5a73cc-986b-11ee-9e16-579c26116de2.html
2. https://www.southtexashealthsystem.com
3. https://www.mass.gov/doc/assigned-data-breach-number-321129-heart-of-texas-behavioral-health-network-12-12-23/download
4. https://www.uth.edu
5. https://www.hotbhn.org
6. https://uthscsa.edu
7. https://www.newsbreak.com/waco-tx/3310895234564-woman-seeks-class-action-lawsuit-status-over-heart-of-texas-behavioral-health-network-personal-data-breach
8. https://www.metrocareservices.org
9. https://www.hipaajournal.com/december-2023-healthcare-data-breach-report/
10. https://www.ecommunity.com
11. https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf?%3F%3F%3Futm_source=IDG&%3F%3Futm_source=IDG&utm_campaign=Oktopost-Employee+Spotlight%3A+Inside+Tanium&utm_content=Oktopost-linkedin&utm_medium=social&utm_source=linkedin
12. https://www.utsouthwestern.edu/newsroom/articles/year-2024/feb-new-pediatric-campus.html
13. https://www.mclennan.gov/AgendaCenter/ViewFile/Minutes/_03072023-1101
14. https://www.unthsc.edu/school-of-health-professions/physician-assistant-studies/
15. https://www.chron.com/news/article/houston-harris-county-cyberattack-texas-18480067.php
16. https://hartfordhealthcare.org