Crossroads Health is committed to protecting the security and privacy of the information we maintain. On March 2, 2022, we began mailing notification letters to individuals whose information may have been involved in a security incident that disrupted the operations of some of our IT systems.
We first identified the incident on January 18, 2022, and immediately took steps to secure our systems, launched an investigation with the assistance of a third-party forensic investigator, and notified law enforcement. The investigation determined that an unauthorized party gained access to our systems from November 21, 2021 to January 18, 2022 and removed some files. On January 24, 2022, we determined that the files were removed from a legacy system that contained information belonging to clients of the former behavioral health facility, Beacon Health, which merged with Crossroads Health.
We conducted an analysis of the files involved in the incident and determined that the following information for clients of Beacon Health was contained in the files: names, contact information, dates of birth, Social Security numbers, driver’s license numbers, treatment and diagnosis information, and/or health insurance information.
For individuals whose information may have been involved, we recommend that they review the statements they receive from all of their healthcare providers and contact the relevant provider immediately if they see services they did not receive appearing on their bill. Additionally, for eligible individuals whose Social Security numbers and/or driver’s license numbers may have been involved in the incident, we are offering complimentary credit monitoring and identity protection services through Experian.
We take this incident very seriously and sincerely regrets any concern this may cause. To help prevent something like this from happening again, we have implemented additional safeguards and technical security measures to further protect and monitor its systems. A dedicated call center has been established to answer questions about this incident, which can be reached at (855) 541-3552, Monday through Friday, between 9:00 a.m. to 6:30 p.m. Eastern Time (excluding major U.S. holidays).
