Southwest Behavioral Data Breach Affects 2,316 Individuals

Southwest Behavioral & Health Services, a large nonprofit behavioral health organization headquartered at 3450 N. 3rd St. in Phoenix, Arizona, disclosed a data breach that affected 2,316 individuals in the United States.

On April 1, 2026, Southwest Behavioral & Health Services identified suspicious activity within its email environment. Upon discovering the unusual activity, the company began investigating the scope of the incident.

The investigation determined that an unauthorized actor had gained access to information contained in six SB&H employee email accounts.

After identifying the compromised accounts, the company conducted a review of the contents of the potentially affected email data. The goal of this review was to determine what types of information were present in the affected accounts and to identify the specific individuals whose information was involved. The review was completed on April 30, 2026.

The specific categories of personal or health information that were exposed in the breach remain publicly undisclosed at this time but may include names, Social Security numbers, contact information, medical records and other health information.

Southwest Behavioral & Health Services posted a notice on its website on May 27, 2026, providing details about the incident and guidance for individuals who may have been affected.

Southwest Behavioral & Health Services' response to the breach

Southwest Behavioral & Health Services also established a dedicated toll-free assistance line for individuals who have questions about the incident. The line can be reached at 833-918-4489 and is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.

The company also directed affected individuals to the Federal Trade Commission and the three major credit reporting agencies for additional resources related to identity theft prevention and fraud protection.