White Sands Treatment Center 2025 Data Breach

White Sands learned on July 8, 2025 that a former employee may have taken patient information without authorization. The investigation confirmed on August 4, 2025 that the employee took the file on April 1, 2025, just before leaving the organization.

The affected information included first and last names, addresses, phone numbers, email addresses, and admission or discharge dates. According to the organization's public notice, sensitive financial information and medical diagnostic information were not involved.

White Sands reported the incident to the HHS Office for Civil Rights, notified affected patients, and said it changed security safeguards, policies, and employee training. Its consumer notice said there were no reports of identity fraud linked to the incident as of the notice date.

Notice recipients should review healthcare statements for services or charges they do not recognize. Before sharing information in an unexpected call, email, or message that refers to their care or relationship with White Sands, they should verify the sender through the organization's official channels.