Pineland CSB Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Pineland Community Service Board data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Pineland Community Service Board

Pineland Community Service Board, also known as Pineland BHDD, is a hospital and health care organization based in Lyons, Georgia. The company provides mental health and related services to the local community and surrounding areas.

Pineland operates over 33 locations in an eight county area. The organization provides mental health counseling, acute stabilization and detoxification, psychosocial rehabilitation, residential services and substance abuse treatment. 

What happened?

In January 2025, Pineland discovered suspicious activity on its network. An investigation revealed that an unauthorized actor had accessed certain systems on multiple occasions between Nov. 24, 2024, and Jan. 20, 2025.

The data breach was later identified as a ransomware attack, with the hacker group Space Bears claiming responsibility and threatening to publish the stolen data on the Tor network. The total number of affected individuals has not been released, but is believed to be in the thousands.

Pineland originally disclosed the cybersecurity incident to the U.S. Department of Health and Human Services on March 20, 2025 and published an updated Notice of Data Privacy Event on its website on Aug. 26, 2025.

Information Exposed

• Names and dates of birth
• Social Security numbers
• Medical information, including but not limited to:
• Medical billing information
• Medical treatment information
• Dates of service
• Diagnosis information
• Medical record information
• Guardian information

Pineland Community Service Board notified affected individuals by mail. The data breach was also disclosed to the Massachusetts Attorney General on Aug. 27, 2025.

Your Rights and Next Steps

If you received a notification from Pineland Community Service Board regarding this breach, it is important to know your rights and options. Lawyers are ready to help those affected understand what steps to take next.

First, individuals should remain vigilant by monitoring their financial and medical accounts for any suspicious activity. Under federal law, everyone is entitled to one free credit report annually from each of the three major credit bureaus: Equifax, Experian and TransUnion. Reviewing these reports can help detect signs of identity theft or fraud.

Affected individuals have the right to place a fraud alert or a credit freeze on their credit files at no cost. A fraud alert requires businesses to verify identity before issuing new credit, while a credit freeze restricts access to credit reports entirely. Both options can help prevent unauthorized use of personal information.

Pineland Community Service Board has offered complimentary credit monitoring to those affected. Taking advantage of this service can provide additional peace of mind and early warning of potential misuse.

If you suspect your information has been misused, report it to the relevant authorities, including your insurance company, health care provider, financial institution, and law enforcement. You may also contact the Federal Trade Commission for further guidance.

You May Be Entitled to Compensation

If your information was exposed in the Pineland Community Service Board data breach, you may be eligible for compensation. Lawyers are investigating claims on behalf of those affected. By joining a class action lawsuit, you can help hold organizations accountable for failing to protect sensitive information.

To find out if you qualify and to take the next step, complete the below form to join the lawsuit investigation.

Sources

• U.S. Department of Health and Human Services
• Massachusetts Attorney General
• Pineland Community Service Board Notice of Data Breach