Park Place Behavioral Healthcare Data Breach Affects 71,702 People

Osceola Mental Health Inc., doing business as Park Place Behavioral Healthcare, has disclosed a data breach involving unauthorized access to its computer systems.

Osceola reported the breach to the U.S. Department of Health and Human Services on Aug. 26, 2026, listing 71,702 people affected. The company additionally disclosed the incident to the Indiana Attorney General and the Massachusetts Office of Consumer Affairs and Business Regulation, as well as posted a notice on its website.

Osceola Mental Health discovered unusual activity on its computer systems on July 23, 2026. Upon discovery, the company secured its environment and engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation into the nature and scope of the incident.

The forensic investigation was completed on Aug. 19, 2026. It determined that certain information stored on the company's systems was copied by an unauthorized party.

Following the investigation, the company conducted a thorough review of the impacted files to determine which specific individuals were affected and what types of data were involved in the breach.

Osceola finalized its list of people to notify on Sept. 17, 2026, and began mailing letters on Sept. 23, 2026. It is offering free credit monitoring and identity theft recovery services through IDX. People with questions can call 1-866-200-0963, Monday through Friday, 9 a.m. to 9 p.m. ET.

The types of personally identifiable information (PII) that may have been exposed include names, Social Security numbers, dates of birth, driver's license numbers, other government-issued ID numbers and financial account information.

Protected health information (PHI) may also have been exposed, including health information and health insurance information.

Notably, on Aug. 6, 2026, the ransomware group INSOMNIA claimed responsibility for the attack on its dark web site.

Osceola Mental Health's response to the breach

Affected individuals must enroll in the IDX services within 90 days of the date of their notification letter. The support line is closed on U.S. national holidays.

The company can also be reached at its main office at 200 Park Place Blvd., Kissimmee, FL 34741, or by calling 407-846-0023.