







Nova Recovery Center, an alcohol and drug rehabilitation provider based in Austin, Texas, recently experienced a data breach impacting thousands of patients. On May 25, 2025 Nova Recovery Center discovered unauthorized access of its systems had taken place.
The breach involved unauthorized access to Nova Recovery Center’s network, reportedly by a threat actor known as “nightly.” On May 25, 2025, the attacker posted on the open web, claiming to have exfiltrated over 200 GB of sensitive data, including deleted records and 1 TB of CCTV footage.
On June 17, 2025, an investigation revealed the data breach compromised both both personally identifiable information (PII) and protected health information (PHI). Exposed information includes names, addresses, dates of birth, Social Security numbers, health insurance information, medical records and financial payment information.
The cybersecurity incident was disclosed to the U.S. Department of Health and Human Services on July 24, 2025. Nova Recovery Center disclosed the data breach to the Maine and Texas Attorney Generals' offices beginning on Aug. 5, 2025.
The organization began notifying affected individuals by mail on Aug. 1, 2025. Affected patients includes 5,518 Texas residents and three in Maine.
In addition to state and federal disclosures, Nova Recovery Center is offering free Kroll identity monitoring to impacted individuals.
If you receive a notice from Nova Recovery about this data breach, you may want to:
The company also set up a dedicated hotline at 866-559-3487, Monday through Friday from 8 a.m. to 5:30 p.m. Central time.
For more information about the center, visit the Nova Recovery Center website.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)