Haven Behavioral Hospital of Albuquerque provided notice last month of a cybersecurity incident that potentially made certain information available, including medical history and health insurance info, according to a news release.
The information affected may have also included names, dates of birth, treatment information and provider information, the release says.
The mental health care organization "observed unusual activity on certain systems" in late September. It then began an investigation with third-party forensic specialists to identify the source of the activity and determine its impact. Haven's investigation determined that "certain files were potentially accessible on a system that may have been subject to unauthorized access" in September, the release said.
A representative for Haven Behavioral Hospital of Albuquerque, which offers treatments for people experiencing mental health and substance abuse, was unable to be reached for comment. Haven Behavioral Healthcare operates seven behavioral hospitals across the country, with additional locations in Texas, Arizona and Idaho, according to its website.
Haven Behavioral Healthcare, which operates the Albuquerque hospital, also provided notifications of data breaches in Ohio and Pennsylvania hospitals.
The number of people impacted by the Albuquerque breach was not provided. Haven is "taking steps to further strengthen the security of its information systems" and continues to review its security policies and procedures, the release said. The group is one of several health-care organizations in New Mexico that experienced cybersecurity incidents.
Presbyterian Healthcare Services previously sent about 276,000 letters to patients about a data breach, the Santa Fe New Mexican reported in 2019. Artesia General Hospital in eastern New Mexico notified patients of an email breach that same year.
