Brightpoint Data Breach Affects 1,051 Individuals

Published

August 22, 2025

Updated

August 27, 2025

Brightpoint

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

Children's Home & Aid dba Brightpoint, a nonprofit social service agency in Illinois, experienced a data breach affecting at least 1,051 individuals. The cybersecurity incident was reported to the U.S. Department of Health and Human Services on Aug. 14, 2025.

The data breach compromised personally identifiable information (PII) and protected health information (PHI). Exposed information includes names, Social Security numbers, driver's license or state ID numbers, health insurance information, medical records and financial account information.

Brightpoint is notifying impacted individuals by mail and published a Notice of Data Event on its website. On June 16, 2025, Brightpoint became aware of unauthorized access to employee email accounts between Jan. 12, 2025 and Feb. 27, 2025.

Children's Home & Aid dba Brightpoint's response

In addition to required state and federal disclosures, Brightpoint has set up a toll-free assistance line at 833-918-0982, Monday through Friday, 8am to 8pm Central.

If you believe your personal and protected health information may have been compromised in this breach:

Carefully review any notice or communication you receive from Brightpoint or Children's Home & Aid.
Monitor financial accounts and credit reports for signs of identity theft.
Consider placing fraud alerts or credit freezes with the major credit bureaus.
Be cautious of unsolicited emails or phone calls requesting personal information.

More information about the organization can be found on the Brightpoint website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.