Drug and Alcohol Treatment Services Data Breach Affects 22,215 Patients

Published
May 2, 2025
Updated
May 8, 2025
Drug and Alcohol Treatment Services Data Breach Affects 22,215 Patients
Drug and Alcohol Treatment Services
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Drug and Alcohol Treatment Services

data breach?

Join the Lawsuit

It's free to join. 

Banner advertisement for ExpressVPN to take control of your online security

Claim Depot may receieve a commission from links on this page

On or around October 6, 2024, Drug and Alcohol Treatment Services, Inc. (DATS), a leading outpatient rehabilitation center in Lackawanna County, Pennsylvania, identified unauthorized activity on its network. The organization responded to secure its systems and engaged third-party forensic specialists to investigate the incident

After a thorough analysis, it was determined that files containing sensitive patient information may have been accessed by an unauthorized party.

The breach has impacted 22,215 people in the United States. The exposed information includes both personally identifiable information (PII) and protected health information (PHI): patient names, medical history and treatment information, health insurance information, and financial information.

The incident was formally disclosed to the U.S. Department of Health and Human Services and can be reviewed in detail on the HHS breach portal.

DATS has also posted a notice of the security incident on its website.

Drug and Alcohol Treatment Services' response

For those affected, DATS has established a toll-free hotline at 1-833-799-4385, available Monday through Friday from 8 AM to 8 PM EST (excluding holidays), to answer questions and address concerns related to the breach. Individuals are encouraged to monitor their account statements and explanation of benefits forms for any suspicious activity or errors.

If you believe you may be affected, you should:

  • Carefully review your health insurance statements and financial accounts for unauthorized activity.
  • Report any suspicious transactions to your insurance provider or financial institution.
  • Contact the DATS hotline for further guidance or if you have questions about your specific situation.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
May 02, 2025,
Date of Breach
Breach Discovered Date
April 15, 2025
Total People Affected
22215
Information Types Exposed
  • social security numbers
  • Medical Records
  • patient names
  • medical history and treatment information
  • health insurance information
  • financial information
  • information_types missing
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image