Western Montana Mental Health Center Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Western Montana Mental Health Center data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Western Montana Mental Health Center
Western Montana Mental Health Center is a provider of behavioral health services across several counties in Montana. Since 1971, the organization and its affiliates have offered comprehensive mental health care to individuals and families in the region.
The center’s mission is to improve access, health, economic and social outcomes for its communities by providing a wide range of behavioral health services. Western Montana Mental Health Center accepts Medicare, Medicaid, Healthy Montana Kids Plus, Healthy Montana Kids (CHIP), most health insurance, and offers a sliding fee scale.
What happened?
Western Montana Mental Health Center experienced a significant data breach affecting 86,758 patients in the United States. The breach occurred on or about May 27, 2025, and it was discovered on Sept. 15, 2024 that certain files were accessed without authorization.
The data breach compromised both personally identifiable information (PII) and protected health information (PHI). Western Montana Mental Health Center disclosed the cybersecurity incident to the U.S. Department of Health and Human Services on Nov. 14, 2024, however did not begin notifying affected individuals or publish a notice of data incident on its website until July 17, 2025.
Exposed Information
- Names
- Dates of birth
- Social Security numbers
- Drivers license numbers
- State or federal identification numbers
- Financial account information
- Health insurance information
- Medical information
- Medical records
The data breach was reported to the Maine and Massachusetts Attorney General’s offices on July 18, 2025. Affected individuals include 12 Massachusetts residents and six in Maine.
Your Rights and Next Steps
If you received a notification from Western Montana Mental Health Center regarding this data breach, it is important to understand your rights. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Identity protection services: Sign up for the free IDX identity protection services offered by WMMHC.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your personal or medical information was exposed in the Western Montana Mental Health Center data breach, you may be entitled to compensation, which can include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress. Lawyers are ready to help you determine your eligibility and guide you through the process.
To find out if you qualify and to join the lawsuit, complete the form below.