In November 2024, Behavioral Health Resources experienced a data breach exposing sensitive personal and medical information of individuals whose data was stored by the organization. The breach allowed unauthorized access to files, leading to potential identity theft, fraud, and exposure of health-related details. A class action lawsuit was filed, alleging the company failed to implement adequate safeguards. The settlement includes up to $5,000 for documented out-of-pocket losses (e.g., credit monitoring, identity theft resolution), $125 for lost time, a pro rata cash payment (~$100), and three years of medical data monitoring (CyEx Medical Shield Total). The total settlement fund is $1.1 million, covering legal fees, administrative costs, and compensation for affected individuals. The breach highlights vulnerabilities in protecting highly sensitive health and personal data, with risks of financial fraud, reputational harm, and long-term privacy violations for victims.