SunCloud Health Breach: 2,594 Patients Impacted

SunCloud Health, a private behavioral health treatment provider based in Northbrook, Illinois, disclosed a data breach earlier this year that affected approximately 2,594 individuals in the United States. The breach involved the exposure of sensitive patient health information.

Between April 22, 2026, and May 4, 2026, unauthorized activity resulted in the exposure of patient information maintained by SunCloud Health.

The types of information exposed included patient names, medical information, diagnoses, medications and other recommended treatment details.

The breach was reported to the U.S. Department of Health and Human Services on July 23, 2026. SunCloud Health also posted a notice of the data security incident on its website.

SunCloud Health's response to the breach

Individuals who believe they may have been affected can visit the company's notice page for the most current information about available resources and next steps. Individuals should also watch for direct communications from SunCloud Health, such as notification letters or emails, that may contain important details about any credit monitoring being offered, enrollment deadlines, contact numbers or specific instructions the company has provided.