Cyberattack on Pavillon: Hacker Group Claims 646GB Data Theft
On August 5, 2026, the hacker collective Global Secret Group claimed responsibility for a suspected cyberattack on Pavillon, a North Carolina-based residential and outpatient addiction treatment center. According to reports, the group alleged it exfiltrated 646 gigabytes of data from the organization, though the scope and nature of the breach remain unconfirmed.
Pavillon, founded in 1996 and located in the Blue Ridge Mountains, serves thousands of patients and employs staff who may have been affected. Legal representatives are investigating the incident to determine whether a class action lawsuit could be filed on behalf of individuals whose data may have been compromised. Those affiliated with Pavillon including current and former patients and employees are being encouraged to participate in the inquiry.
Cybersecurity monitoring platform Ransomware.live also reported the group’s claim, though no additional details about the attack’s methodology or the specific data exposed have been disclosed. As of August 6, 2026, Pavillon has not publicly confirmed the breach. The investigation remains ongoing.
Source: https://www.classaction.org/data-breach-lawsuits/pavillon-august-2026
Pavillon TPRM report: https://www.rankiteo.com/company/pavillon
"id": "pav1786055130",
"linkid": "pavillon",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Thousands of patients and '
'employees (current and former)',
'industry': 'Healthcare (Addiction Treatment)',
'location': 'North Carolina, USA',
'name': 'Pavillon',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Affiliated individuals (patients and employees) '
'encouraged to participate in legal inquiry',
'data_breach': {'data_exfiltration': '646GB',
'sensitivity_of_data': 'Potentially highly sensitive (patient '
'and employee data)'},
'date_detected': '2026-08-05',
'date_publicly_disclosed': '2026-08-05',
'description': 'On August 5, 2026, the hacker collective *Global Secret '
'Group* claimed responsibility for a suspected cyberattack on '
'Pavillon, a North Carolina-based residential and outpatient '
'addiction treatment center. The group alleged it exfiltrated '
'646 gigabytes of data from the organization, though the scope '
'and nature of the breach remain unconfirmed.',
'impact': {'data_compromised': '646GB',
'legal_liabilities': 'Potential class action lawsuit'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': '646GB'},
'references': [{'date_accessed': '2026-08-06', 'source': 'Ransomware.live'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
'threat_actor': 'Global Secret Group',
'title': 'Cyberattack on Pavillon: Hacker Group Claims 646GB Data Theft',
'type': 'Data Breach'}