Circle Park Data Breach Exposes Sensitive Information of 7,020 Individuals

Published
February 19, 2026
Updated
February 19, 2026
Circle Park Data Breach Exposes Sensitive Information of 7,020 Individuals
Circle Park Behavioral Health Services

Affected by the

Circle Park Behavioral Health Services

data breach?

Join the Lawsuit

On Jan. 14, 2026, Florence County Commission on Alcohol & Drug Abuse, dba Circle Park Behavioral Health Services (“Circle Park”), reported a data breach that impacted the personal and health information of 7,020 individuals across the United States, including 1,157 individuals affected in South Carolina and one in New Hampshire.

Circle Park first detected unusual activity in its systems on March 8, 2025. Upon discovery, they secured their network and brought in an independent cybersecurity firm to investigate. The investigation revealed that an unauthorized actor had accessed and acquired sensitive information from certain employee email accounts.

The review of affected data concluded on Dec. 23, 2025.

The breach exposed a wide range of personally identifiable information (PII) and protected health information (PHI), including names, Social Security numbers, dates of birth, driver’s license numbers, state identification numbers, health insurance information, and medical treatment and/or history information.

The breach was reported to the New Hampshire, the South Carolina, and the Vermont attorneys general, as well as the U.S. Department of Health and Human Services. Circle Park posted a notice of the breach on its website.

Circle Park’s response to the breach

To help those affected, Circle Park is offering 12 months of complimentary credit monitoring and identity theft protection services through IDX, a data breach and recovery services provider. These services include credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

Enrollment instructions and codes were provided in the consumer notification letters, which were sent out by Dec. 30, 2025, with an enrollment deadline of March 29, 2026. Individuals are encouraged to enroll in these free services and remain vigilant by monitoring their account statements and credit reports.

The consumer notice also outlines steps for placing fraud alerts or security freezes on credit files, and provides contact information for major credit bureaus and relevant government agencies.

For more information or assistance, affected individuals can call IDX at 1-833-788-9712, Monday through Friday, 9 a.m. to 9 p.m. Eastern Time.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
Date of Breach
Breach Discovered Date
Total People Affected
Information Types Exposed
  • Social Security number
  • Date of birth
  • Driver’s license number
  • Health insurance information
  • Medical treatment and/or history information
  • Names
  • State identification number
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image