South Jersey Behavioral Health Resources, Inc.

South Jersey Behavioral Health Resources, Inc. (SJBHR), located in Pennsauken, New Jersey, experienced a significant data breach that was first identified on April 5, 2023, when encrypted files were discovered on their computer systems. The breach was the result of a cyberattack that began on April 3, 2023, as determined by an investigation with the help of third-party forensic specialists[3][5][7][9][11][13].

The unauthorized access to SJBHR’s servers led to the potential exposure of a wide range of sensitive personal and health information. The data potentially accessed includes consumers’ names, contact information, Social Security numbers, driver’s license numbers, dates of birth, medical record numbers, treating/referring physicians, health insurance information, subscriber numbers, medical history information, and diagnosis/treatment information[3][5][9][11][13].

SJBHR has been sending out data breach notification letters to all individuals who may have been impacted by the security incident. The organization has also reported the incident to law enforcement and is taking steps to implement additional safeguards and review its data privacy and security policies and procedures[7][9]. They have encouraged individuals to remain vigilant against incidents of identity theft and fraud, to review account statements, and to monitor free credit reports for suspicious activity[9].

SJBHR is a fully licensed non-profit behavioral health agency that provides a range of services including outpatient care, children’s outpatient care, homeless services, adult partial care services, and residential services[3][5]. The organization is an affiliate of Inperium, Inc., and employs more than 153 people, generating approximately $15 million in annual revenue[3].

For those affected by the breach, it is recommended to carefully review any breach notice, enroll in any free credit monitoring services provided by SJBHR, change passwords and security questions for online accounts, regularly review account statements for signs of fraud or unauthorized activity, and monitor credit reports for signs of identity theft[5].

Citations:

1. https://www.sjbhr.org/PublicPages/Home.aspx
2. https://www.nj.gov/humanservices/
3. https://www.jdsupra.com/legalnews/south-jersey-behavioral-health-6323432/
4. https://completecarenj.org
5. https://www.turkestrauss.com/2023/06/07/south-jersey-behavioral-health-resources-data-breach-investigation/
6. https://www.stjosephshealth.org
7. https://njbiz.com/south-jersey-behavioral-health-agency-reports-data-privacy-event/
8. https://www.njcourts.gov
9. https://www.prnewswire.com/news-releases/south-jersey-behavioral-health-resources-provides-notice-of-data-privacy-event-301841870.html
10. https://www.osha.gov
11. https://www.myinjuryattorney.com/south-jersey-behavioral-health-resources-data-breach-alert/
12. https://www.humana.com
13. https://www.hipaajournal.com/iowa-medicaid-soutth-jersey-behavioral-health-resources-breaches/
14. http://www.newbridgehealth.org
15. https://njbiz.com/serv-behavioral-health-system-reports-data-breach/
16. https://www.inspirahealthnetwork.org