The personal information of hundreds of thousands of American patients may have been leaked following a cybersecurity incident.
The U.S. Department of Health and Human Services Office for Civil Rights says the Florida-based substance use disorder (SUD) treatment center Operation PAR suffered a hacking/IT incident affecting 145,714 people.
Operation PAR says an unauthorized entity gained access to its network and stole files that contain sensitive information, including names, dates of birth, Social Security numbers, driver’s license numbers, financial account records, and medical records.
“On or about June 10, 2025, Operation PAR, Boley, and Eleos detected unauthorized access to our network as a result of a cybersecurity incident.
Upon learning of the issue, we secured our network and commenced a prompt and thorough investigation. As part of our investigation, we have been working very closely with external cybersecurity professionals experienced in handling these types of incidents. Following the completion of our investigation, it was determined that some of our files may have been accessed or removed by the unauthorized individual(s) between June 6, 2025 and June 10, 2025. We conducted a thorough review of the potentially impacted data and on June 10, 2026, we determined that the impacted files may have contained your personal information.”
Operation PAR says it abruptly sent letters of notification to affected customers while offering access to credit monitoring through Epiq. For now, the firm says it has not found any evidence that the stolen data has been used to commit identity theft or financial fraud.
Follow us on X, Facebook and Telegram
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Generated Image: Midjourney
