.png)
Mental Health Association Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Mental Health Association Inc. (“MHA”) data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Mental Health Association (“MHA”)
Mental Health Association Inc. (“MHA”) is a nonprofit based in Western Massachusetts, providing a variety of residential programs and services. Founded in 1960, MHA serves individuals affected by mental illness, developmental disabilities, brain injuries, substance use, and homelessness.
The organization operates more than 60 residential sites and employs approximately 780 full and part-time staff members. Services offered include emotional health therapies, substance use recovery programs, outpatient emotional wellness centers, and housing assistance.
What Happened?
On December 2, 2024, Mental Health Association discovered a potential compromise of its systems by an unauthorized actor. An investigation revealed that both personally identifiable information (PII) and protected health information (PHI) may have been exposed in the data breach.
MHA notified the Maine and Massachusetts Attorney Generals' offices on May 30, 2025 and has also posted a Notice of Data Security Incident on its own website. According to disclosures, 12,633 individuals in Massachusetts and 11 individuals in Maine were affected by the cybersecurity incident.
Exposed Information:
- Name
- Address
- Social Security number
- Medical diagnosis/condition
- Medication prescribed
- Medical record number
- Other medical information
- Date of birth
- Driver's license number
Your Rights and Next Steps
If you believe your personal and protected health information has been affected by the Mental Health Association data breach, you are entitled to free credit monitoring and identity theft services. You also have the right to seek compensation for any harm or inconvenience caused by this incident.
- Credit monitoring and identity protection services: Sign up for the free credit monitoring and identity protection services MHA is offering.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and free credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Finally, remember that lawyers are ready to help you understand your legal rights and determine if you are eligible for compensation due to this data breach.
You May Be Entitled to Compensation
If your personal information was compromised in the Mental Health Association data breach, you may be eligible to join a class action lawsuit and receive compensation. Lawyers are ready to help you understand your legal rights and take the next steps.
To find out if you qualify and to join others who are seeking justice, complete the form below.
.svg)