Data Breach

Nadap Data Breach Lawsuit Investigation

If you were affected by the National Association on Drug Abuse Programs data breach, you may be entitled to compensation.
Updated on
Published on
Nadap Data Breach Lawsuit Investigation
Nadap Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the National Association on Drug Abuse Programs, Inc. data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About National Association on Drug Abuse Programs

National Association on Drug Abuse Programs (NADAP) is a New York-based nonprofit human services agency. Founded in 1971, NADAP serves more than 35,000 New Yorkers, offering a range of programs tailored to individuals with medical, behavioral health, substance use and social service needs.

NADAP operates a variety of services, including health home care coordination for Medicaid enrollees, health insurance education and enrollment, substance use assessment and referral, and workforce development programs.

What Happened?

On Jan. 10, 2026, NADAP discovered a data breach involving unauthorized access to its systems.

The incident was later claimed by the GENESIS ransomware group, which posted about the breach on the dark web on March 7, 2026. According to the group, they obtained a wide range of sensitive data, including medical databases, personal data, Medicaid billing data, financial and tax records, and more.

The attackers threatened to publish the stolen data within days.

NADAP’s investigation revealed that the following types of consumer information were exposed:

Information Exposed:

  • Names
  • Social Security numbers
  • Dates of birth
  • Medical or health information
  • Health care treatment or diagnostic information
  • Health insurance information
  • Tax or financial information

The breach potentially affected tens of thousands of individuals who have interacted with NADAP’s programs and services. NADAP has provided a public notice on its website.

You May Be Entitled to Compensation

If your information was exposed in the NADAP data breach, you may be entitled to compensation for out-of-pocket losses, time spent addressing the breach and any emotional distress you have experienced. Lawyers are investigating claims on behalf of those affected and can help you understand your eligibility.

To find out if you qualify and to join others seeking justice, complete the below form to get started.

Sources

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION