Data Breach

The Devereux Foundation Data Breach Investigation

If you were affected by the The Devereux Foundation data breach, you may be entitled to compensation.
Updated on
Published on
The Devereux Foundation Data Breach Investigation
The Devereux Foundation Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the The Devereux Foundation data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About The Devereux Foundation

The Devereux Foundation, also known as Devereux Advanced Behavioral Health, is one of the largest nonprofit organizations in the United States focused on behavioral healthcare. Founded in 1912 by Helena Devereux, the organization has grown into a comprehensive national network that serves individuals, families, schools and communities across the country.

With more than 6,000 employees, Devereux operates 14 centers in 13 states and serves tens of thousands of children, adults and families every year.

What Happened?

On Nov. 9, 2025, The Devereux Foundation discovered suspicious activity on its computer systems. An investigation determined that an unauthorized actor accessed certain systems between Nov. 6, 2025, and Nov. 9, 2025, and copied files without permission.

The breach exposed sensitive information for current and former employees, clients, donors, payors and business partners.

Information Exposed:

  • Names
  • Social Security numbers
  • Drivers licenses
  • Government-issued ID numbers (including state IDs and passports)
  • Financial account information
  • Health records
  • Medical information
  • Health insurance information
  • Date of birth
  • Digital/electronic signatures
  • Payment card information
  • US Alien registration numbers
  • Taxpayer identification numbers

The breach was reported to authorities and regulators, including the California, Massachusetts, Texas and Vermont attorneys general, as well as the U.S. Department of Health and Human Services. The Gentlemen ransomware group claimed responsibility for the attack and threatened to publish the stolen data on the dark web.

Devereux notified affected individuals by mail and posted a notice on its website.

You May Be Entitled to Compensation

If your personal information was exposed in The Devereux Foundation data breach, you may be eligible for compensation. Lawyers are investigating potential claims on behalf of affected individuals.

Completing the below form is the first step to learn about your rights and to join a potential class action lawsuit.

Sources

SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION