Mount Rogers Community Services Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Mount Rogers Community Services data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Mount Rogers Community Services
Mount Rogers Community Services is a not-for-profit organization that has served communities in southwest Virginia since 1972. The organization provides a range of support services to individuals with mental health needs, intellectual and developmental disabilities, and substance use disorders.
With a staff of over 150 employees, Mount Rogers Community Services operates in Bland, Carroll, Grayson, Smyth, and Wythe Counties, as well as the City of Galax. Mount Rogers is governed by a 14-member Board of Directors and also manages several residential facilities.
What Happened?
In April 2025, Mount Rogers Community Services suffered a data breach involving a ransomware attack. The hacking group known as INC RANSOM claimed responsibility for the incident, posting about the breach on the dark web on June 10, 2025.
Mount Rogers Community Services disclosed the breach to the Massachusetts Attorney General’s office on June 13, 2025 and posted a Notice of Cyber Incident on its own website.
The cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI) of both patients and employees.
Exposed Information:
- Name
- Social Security number
- Address
- Zip code
- Date of birth
- Diagnosis/conditions
- Medications
- Dates of service or other treatment information
- Information related to insurance or claims information
- Driver’s license numbers
- Medical information shared for employment purposes
- Benefits enrollment information
Your Rights and Next Steps
If you receive a notification that your information was involved in the Mount Rogers Community Services data breach, it’s important to take action. Lawyers are ready to help you understand your options and pursue a claim if you qualify.
Affected individuals have the right to:
- Credit monitoring and identity theft protection services: Sign up for the free Kroll credit monitoring and identity theft restoration services offered in the notice you received.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You have rights under state and federal laws, including the right to seek compensation if your information was compromised due to a company’s failure to protect it. Lawyers are ready to help you understand your options and pursue a claim if you qualify.
You May Be Entitled to Compensation
If you were affected by the Mount Rogers Community Services data breach, you may be eligible for compensation for damages such as lost time, out-of-pocket expenses, and emotional distress.
Lawyers are ready to help you take the next step. To find out if you qualify and to join the lawsuit, complete the form below.