.png)
Nova Recovery Center Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Nova Recovery LLC d/b/a Nova Recovery Center data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Nova Recovery Center
Nova Recovery LLC, operating as Nova Recovery Center, is an alcohol and drug rehabilitation provider based in Austin, Texas. The company offers a full continuum of care for individuals struggling with substance use disorders, including detox, inpatient and outpatient rehabilitation, and sober living programs.
Nova Recovery Center provides individualized and holistic care, tailoring treatment plans to address the unique needs of each client. The center offers structured programs, clinical staff, and specialized gender-specific options for adults seeking recovery in the Austin area.
What happened?
On May 25, 2025, Nova Recovery Center discovered that certain systems on its network had been accessed without authorization by a cybercriminal. A threat actor known as “nightly” posted on the dark web, claiming to have exfiltrated over 200 GB of sensitive data, including deleted records. The data breach compromised patient personal, financial and protected health information.
On July 9, 2025, the company identified several thousand individuals whose information was involved. Nova Recovery reported the data breach to the U.S. Department of Health and Human Services on July 24, 2025 and notices to affected individuals began on Aug. 1, 2025.
The cybersecurity incident was disclosed to the Texas and Maine Attorney Generals' offices beginning on Aug. 5, 2025, Impacted patients include 5,518 in Texas and three in Maine.
Exposed Information
- Name
- Address
- Social Security number
- Driver’s license number
- Financial information, including account number, credit or debit card number, payment information
- Medical information
- Health insurance information
- Date of birth
Your Rights and Next Steps
If you received a notice from Nova Recovery Center or suspect your information may have been involved, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Identity theft protection services: Sign up for the free Kroll identity monitoring services, offered by Nova Recovery.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your information was compromised in the Nova Recovery Center data breach, you may be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Lawyers are ready to pursue possible claims for damages related to the exposure of their personal information. To join a potential lawsuit, complete the form below.
.svg)