Southwest Behavioral Health 2026 Data Breach

SB&H detected suspicious activity in its email environment on April 1, 2026, and began an investigation to determine the scope. The investigation found that an unauthorized person accessed certain information in six employee email accounts. The organization reviewed the affected email data to determine whom it concerned and completed that work on April 30.

The HHS record lists the event as an email breach involving protected health information. SB&H's public notice does not provide an itemized list of the affected personal or health information. Notice recipients should therefore rely on the fields identified in their individual letters.

The organization secured its email environment, conducted a comprehensive investigation, and said it implemented additional technical safeguards. It found no evidence of actual or attempted misuse but offered affected people complimentary credit monitoring and identity-protection services as a precaution.

Notice recipients should enroll in the offered protection service and monitor credit reports, account statements, health-care bills, and insurance explanations of benefits for activity they do not recognize. They should contact the relevant provider, insurer, or financial institution if they find an unfamiliar service or charge.