Northwestern Community Services Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Northwestern Community Services Board data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Northwestern Community Services Board
Northwestern Community Services Board (NWCSB) is a public provider of behavioral health services located in Virginia’s Shenandoah Valley. The organization employs over 250 professionals and offers a variety of programs supporting children and adults facing mental health, substance use, and developmental challenges.
Services provided include outpatient, case management, day support, residential, and emergency services.
What Happened?
On August 8, 2024, Northwestern Community Services Board discovered a significant data breach caused by a ransomware attack. The hacking group known as BLACK SUIT claimed responsibility for the incident, and posted on the Tor network on the dark web.
The breach was reported to the U.S. Department of Health and Human Services on May 29, 2025, and affected a total of 21,856 individuals in the United States. The cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed Information:
- Name
- Medical history and treatment information
- Health insurance information
- Financial information
Your Rights and Next Steps
If you received a notification that your information was involved in the Northwestern Community Services Board data breach, you have important rights. You may have the right to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring services: Sign up any free identity protection and credit monitoring services NWCSB may offer.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help you determine if you are eligible to recover damages due to the exposure of your personal and health related information.
You May Be Entitled to Compensation
If your information was compromised in the Northwestern Community Services Board cybersecurity incident, you may be entitled to compensation. Lawyers are investigating this data breach and are prepared to help affected individuals pursue claims for damages.
To find out if you qualify and to take the first step and complete the form below to join a lawsuit.