Cahaba Center for Mental Health has experienced a data breach. The cybersecurity incident has compromised the protected health information (PHI) of over at least 500 individuals.
Cahaba Center for Mental Health reported the data breach to the U.S. Department of Health & Human Services on May 27, 2025, disclosing that 500 or more people have been affected.
PHI, or protected health information, often includes names, dates of birth, contact information, medical records and other health-related personal data.
Federal law requires HHS notification when protected health information is involved in a data breach. Cahaba is also required to identify impacted individuals and notify them if their information was involved in the incident.
Individuals who believe their personal or protected health information may have been compromised in this data incident should:
More information about the company's services and locations can be found on the Cahaba Center for Mental Health website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.