Harbor Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Harbor data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Harbor
Harbor is a provider of mental health, substance use treatment, wellness and vocational services in Northwest Ohio. The organization serves adults, children and families, offering clinical services such as psychiatry, psychology, treatment for anxiety, stress, depression, grief and loss, ADHD and autism.
In 2019, Harbor entered a joinder agreement with the Central Community Health Board of Hamilton County, a nonprofit behavioral health organization serving the greater Cincinnati and Hamilton County area. Today, Harbor employs nearly 400 people and continues to support the community with a wide range of behavioral health and wellness programs.
What Happened?
On Aug. 1, 2025, Harbor discovered suspicious activity on its computer network. An investigation revealed that an unauthorized actor accessed and took certain files from Harbor’s network between July 25 and Aug. 1, 2025. Harbor immediately began a comprehensive review to determine what information was involved and who was affected.
Information Exposed:
- Name
- Address
- Date of birth
- Social Security number
- Driver’s license number or state identification number
- Medical diagnosis and treatment information
- Clinical information
- Financial account information
- Health insurance information
Harbor notified affected individuals by written notice beginning Oct. 24, 2025, and posted a notice on its website. The breach was also reported to the Maine Attorney General and the U.S. Department of Health and Human Services.
Your Rights and Next Steps
If you received a notice from Harbor, or believe your information may have been involved, there are important steps you can take to protect yourself. Harbor is offering complimentary credit monitoring services through Epiq for individuals whose personal information was potentially affected. This includes credit monitoring, dark web monitoring, credit protection, change of address monitoring and identity restoration services.
In addition to enrolling in these services, affected individuals are encouraged to:
- Review account statements and monitor credit reports for unauthorized or suspicious activity
- Place a fraud alert or credit freeze on credit files with the major credit bureaus (Equifax, Experian, TransUnion)
- Obtain a free credit report annually from each of the three credit bureaus
- Report any incidents of identity theft or fraud to law enforcement, the Federal Trade Commission and their state Attorney General
Harbor has also notified the three major credit reporting agencies and is working to enhance its security safeguards and employee training to prevent future incidents.
You May Be Entitled to Compensation
If your personal or health information was exposed in the Harbor data breach, you may have legal rights and could be eligible for compensation. Lawyers are ready to help individuals affected by this breach understand their options and pursue claims for damages.
To find out if you qualify to participate in a lawsuit or settlement, complete the below form. This is the first step to protecting your rights and seeking compensation for any harm caused by the breach.
.png)