Forward, The National Databank for Rheumatic Diseases Discloses Data Breach

On June 19, 2025, Forward, The National Databank for Rheumatic Diseases, discovered unauthorized access to its network that exposed sensitive personal and health information of research participants. The breach occurred between March 17 and March 22, 2025, when suspicious activity was detected on certain systems.

A thorough investigation, aided by third-party cybersecurity and digital forensics specialists, revealed that files and folders within Forward’s network were potentially viewed or taken by unauthorized actors during this period.

The affected information includes a wide range of personally identifiable information (PII) and protected health information (PHI): names, contact information, Social Security numbers, dates of birth, medical information or history, disability information, mental and physical treatment information, diagnoses, prescription information, treating or referring physicians, and medical record numbers.

This combination of data significantly increases the risk of identity theft and medical fraud for those affected.

While Forward has not disclosed the total number of individuals impacted nationwide, it has confirmed that 38 Maine residents were affected, as reported in its notice to the Maine Attorney General. The breach was also reported to the Massachusetts Attorney General and New Hampshire Attorney General on July 22, 2025.

Forward notified affected individuals in writing on July 22, 2025. The company has posted a public disclosure notice on its website.

Forward's response

Upon discovering the incident, Forward immediately secured its systems and launched a comprehensive investigation to determine the scope and impact of the breach. The organization engaged external cybersecurity experts to assist with the forensic review and to ensure the security of its network moving forward. Forward has also reviewed and updated its internal policies, procedures and processes to help prevent similar incidents in the future.

For those affected, Forward is offering 24 months of complimentary credit monitoring and identity theft protection services through Cyberscout, a TransUnion company. Affected individuals will receive instructions on how to enroll in these services and are encouraged to do so promptly. Forward’s notice also provides detailed guidance on steps individuals can take to protect themselves, including monitoring credit reports, placing fraud alerts or credit freezes, and reporting any suspicious activity to the Federal Trade Commission or law enforcement.

Given the sensitive nature of the information exposed—including Social Security numbers and detailed medical data—affected individuals should remain vigilant for signs of identity theft or fraud. Regularly reviewing financial and medical statements, using free annual credit reports, and considering a credit freeze are all prudent steps. Forward’s call center is available at 1-833-380-7005 for questions or assistance.

For more information about Forward and its work, visit the Forward website.