On or around October 6, 2024, Drug and Alcohol Treatment Services, Inc. (DATS), a leading outpatient rehabilitation center in Lackawanna County, Pennsylvania, identified unauthorized activity on its network. The organization responded to secure its systems and engaged third-party forensic specialists to investigate the incident
After a thorough analysis, it was determined that files containing sensitive patient information may have been accessed by an unauthorized party.
The breach has impacted 22,215 people in the United States. The exposed information includes both personally identifiable information (PII) and protected health information (PHI): patient names, medical history and treatment information, health insurance information, and financial information.
The incident was formally disclosed to the U.S. Department of Health and Human Services and can be reviewed in detail on the HHS breach portal.
DATS has also posted a notice of the security incident on its website.
For those affected, DATS has established a toll-free hotline at 1-833-799-4385, available Monday through Friday from 8 AM to 8 PM EST (excluding holidays), to answer questions and address concerns related to the breach. Individuals are encouraged to monitor their account statements and explanation of benefits forms for any suspicious activity or errors.
If you believe you may be affected, you should:
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.