Southwest Behavioral & Health Services Reports Data Breach Affecting 2,316 Individuals
Southwest Behavioral & Health Services (SB&H), a Phoenix, Arizona-based nonprofit behavioral health provider, disclosed a data breach impacting 2,316 individuals across the U.S. The incident was detected on April 1, 2026, when the organization identified suspicious activity within its email environment.
An investigation revealed that an unauthorized actor had accessed six employee email accounts. SB&H conducted a review of the compromised data, completing its assessment by April 30, 2026, to determine the scope of exposed information. While the specific categories of compromised data remain undisclosed, potentially affected details include names, Social Security numbers, contact information, medical records, and other health-related data.
On May 27, 2026, SB&H published a breach notice on its website, offering guidance to impacted individuals. The organization also established a dedicated toll-free assistance line (833-918-4489) for inquiries, available Monday through Friday from 8 a.m. to 8 p.m. Central Time. Additionally, affected individuals were directed to resources from the Federal Trade Commission (FTC) and major credit reporting agencies for identity theft prevention and fraud protection.
Source: https://www.claimdepot.com/data-breach/southwest-behavioral-health-services-2026
Southwest Behavioral & Health Services cybersecurity rating report: https://www.rankiteo.com/company/southwest-behavioral-health-services
"id": "SOU1781714348",
"linkid": "southwest-behavioral-health-services",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '2316',
'industry': 'Behavioral Health',
'location': 'Phoenix, Arizona, USA',
'name': 'Southwest Behavioral & Health Services (SB&H)',
'type': 'Nonprofit'}],
'attack_vector': 'Email Compromise',
'customer_advisories': 'Guidance provided via breach notice, toll-free '
'assistance line, and resources from FTC and credit '
'reporting agencies',
'data_breach': {'number_of_records_exposed': '2316',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Contact information',
'Medical records',
'Other health-related data']},
'date_detected': '2026-04-01',
'date_publicly_disclosed': '2026-05-27',
'description': 'Southwest Behavioral & Health Services (SB&H), a Phoenix, '
'Arizona-based nonprofit behavioral health provider, disclosed '
'a data breach impacting 2,316 individuals across the U.S. An '
'unauthorized actor accessed six employee email accounts, '
'potentially exposing sensitive information such as names, '
'Social Security numbers, contact information, medical '
'records, and other health-related data.',
'impact': {'data_compromised': 'Names, Social Security numbers, contact '
'information, medical records, and other '
'health-related data',
'identity_theft_risk': 'High',
'systems_affected': 'Employee email accounts'},
'initial_access_broker': {'entry_point': 'Employee email accounts'},
'investigation_status': 'Completed',
'references': [{'source': 'Southwest Behavioral & Health Services Breach '
'Notice'}],
'response': {'communication_strategy': 'Breach notice on website, dedicated '
'toll-free assistance line '
'(833-918-4489), and guidance from FTC '
'and credit reporting agencies'},
'title': 'Southwest Behavioral & Health Services Data Breach',
'type': 'Data Breach'}