RBHA Hit by Ransomware Attack, Exposing Sensitive Data of Over 113,000 Individuals On September 29, 2025, Richmond Behavioral Health Authority (RBHA) suffered a ransomware attack that compromised the personally identifiable information (PII) and protected health information (PHI) of at least 113,232 individuals across the U.S. Malicious actors breached RBHA’s network, deploying ransomware that encrypted portions of the organization’s systems. The intrusion was detected and contained the following day, September 30. While RBHA found no definitive evidence that the exposed data was accessed or misused, the organization could not rule out the possibility, prompting notifications to affected individuals as a precaution. The breach exposed highly sensitive details, including full names, Social Security numbers, passport numbers, financial account information, and medical records. This combination of data heightens the risk of identity theft and fraud for those impacted. RBHA reported the incident to the U.S. Department of Health and Human Services on November 28, 2025, and published a Notice of Data Breach on its website. Affected individuals were notified by mail. In response, RBHA engaged internal IT teams and third-party cybersecurity experts to investigate the breach, secure its systems, and prevent further compromise. The organization has also set up a dedicated hotline (844-572-2716) for impacted individuals seeking assistance.