Company Details
therapeutic-health-services
199
854
62133
ths-wa.org
3
THE_3306157
Completed


Therapeutic Health Services Company CyberSecurity Posture
ths-wa.orgAt Therapeutic Health Services, our vision is to improve quality of life for all, our mission is to foster healing and recovery. We do this by helping to rehabilitate individuals and heal families affected by alcohol dependence, drug dependence, and/or mental illness. For over 50 years we have helped individuals and families lead healthy and productive lives. We offer the most effective evidence-based, culturally appropriate behavioral health treatment in an outpatient setting. Our strengths-based, trauma-informed treatment includes one-on-one and group counseling sessions, life skills groups, vocational groups, case management and relapse prevention groups. Our experienced, compassionate and professional staff includes licensed chemical dependency and mental health professionals, case managers, nurses, ARNPs, physicians and psychiatrists. Providing programs and services individualized to the unique goals and capabilities of the individual, allows us to help our patients achieve positive outcomes. Our primary care team helps our substance use and mental health patients to manage their overall physical health as well as commonly occurring chronic conditions. In an average year, our 9 service locations in King and Snohomish counties serve approximately 4,500 adults and nearly 750 youth and young adults in our community. Therapeutic Health Services is the largest non-profit provider of medication-assisted treatment for opioid addiction in Washington State. We specialize in treating high-risk, low-income, ethnic minority, multi-system involved, and “harder to serve” adults and youth.
Company Details
therapeutic-health-services
199
854
62133
ths-wa.org
3
THE_3306157
Completed
Between 700 and 749

THS Global Score (TPRM)XXXX

Description: Therapeutic Health Services (THS) suffered a data breach on February 26, 2024, reported by the Vermont Office of the Attorney General on July 18, 2024. The incident exposed sensitive personal and medical information of individuals, including full names, Social Security numbers, dates of birth, medical service details, and health records. The breach poses significant risks, as compromised data could facilitate identity theft, financial fraud, or targeted phishing attacks leveraging medical history. THS has engaged law enforcement and is providing complimentary credit monitoring to affected individuals as a mitigative measure. However, the exposure of highly regulated health data (protected under HIPAA) elevates the severity, given the potential for long-term harm to victims, including medical identity fraud or blackmail. The breach underscores vulnerabilities in healthcare data security, where unauthorized access to such granular personal and medical details can have profound reputational, financial, and operational consequences for both the organization and its patients. The incident aligns with broader trends of cyber threats targeting healthcare providers, where patient trust and regulatory compliance are critically at stake.


No incidents recorded for Therapeutic Health Services in 2026.
No incidents recorded for Therapeutic Health Services in 2026.
No incidents recorded for Therapeutic Health Services in 2026.
THS cyber incidents detection timeline including parent company and subsidiaries

At Therapeutic Health Services, our vision is to improve quality of life for all, our mission is to foster healing and recovery. We do this by helping to rehabilitate individuals and heal families affected by alcohol dependence, drug dependence, and/or mental illness. For over 50 years we have helped individuals and families lead healthy and productive lives. We offer the most effective evidence-based, culturally appropriate behavioral health treatment in an outpatient setting. Our strengths-based, trauma-informed treatment includes one-on-one and group counseling sessions, life skills groups, vocational groups, case management and relapse prevention groups. Our experienced, compassionate and professional staff includes licensed chemical dependency and mental health professionals, case managers, nurses, ARNPs, physicians and psychiatrists. Providing programs and services individualized to the unique goals and capabilities of the individual, allows us to help our patients achieve positive outcomes. Our primary care team helps our substance use and mental health patients to manage their overall physical health as well as commonly occurring chronic conditions. In an average year, our 9 service locations in King and Snohomish counties serve approximately 4,500 adults and nearly 750 youth and young adults in our community. Therapeutic Health Services is the largest non-profit provider of medication-assisted treatment for opioid addiction in Washington State. We specialize in treating high-risk, low-income, ethnic minority, multi-system involved, and “harder to serve” adults and youth.


In addition to being partners in life as husband and wife Paul and Lola Duffy are passionate about their shared mission to assist others in working through the very difficult thoughts and feelings associated with grief and loss. Paul is a Licensed Professional Counselor and Lola is a Certified Grie

Wyoming Valley Behavioral Health provides psychiatric services for adults – offering individualized, trauma-informed programs that treat the “whole person,” not just the illness they’re battling. Our staff focuses on an individual’s strengths and their connections to the community, encouraging patie

Feniks (Phoenix) was set up in 2007 as a charity supporting integration and aiming at improving the wellbeing of the Central Eastern European Community in Edinburgh. We seek to help individuals and families who have moved away from their homeland in facing the challenges which can result from immigr

MHRCET is comprised of caring, dedicated, and mission driven individuals working toward the common goal of helping those with mental health and recovery issues. Our primary objectives are providing quality mental health services, educating the general public, engaging those in need of support, and

GGZ Delfland is een van de oudste instellingen voor geestelijke gezondheidszorg. Sinds jaar en dag (1394 om precies te zijn) dragen wij zorg voor kinderen, jongeren, volwassenen en ouderen met psychische problemen. Wij helpen ze de regie over hun leven te hervinden. Hun wensen en behoeften zijn het

RCCS is dedicated to providing proven community-based programming for individuals transitioning from the criminal justice system back into their communities. RCCS believes – without reservation – that all individuals possess the ability to make positive life changes. Based upon this belief, RCCS pro

At Turning Point Centers, we support individuals as a lifelong partner through their journey toward healing and recovery from the disease of addiction. Our compassionate clinicians treat addiction as a chronic, progressive disease. And because our team understands that addiction is a disease that

Alliance Psychological Services has been providing a range of counselling services and psychological therapies to local communities for over 20 years and have become the largest, most trusted provider across Teesside. Our aim is to ensure that people have access to high quality, evidence-based inter

Welcome to Converge. We are an Employee Assistance Program (EAP) provider supporting Australian and New Zealand organisations and their employees. We deliver mental health and wellbeing support services, as well as training and consulting services, to over 2.7 million employees and their immediate f
.png)
The HIPAA Journal has compiled healthcare data breach statistics from October 2009, when the Department of Health and Human Services (HHS)...
We tested 27 online therapy platforms to find the best one. Discover the best online therapy services, based on our extensive review and...
We reviewed online therapy platforms to find the best online therapy that takes insurance. Find out more about using online therapy with...
UPDATE: December 9, 2025. FDA Announces a Digital Health Devices Pilot. The FDA announces the “Technology-Enabled Meaningful Patient...
DealMed Medical Supplies has confirmed that sensitive data was stolen in a July ransomware attack, the Wisconsin Department of Corrections...
Data breach at Healthcare Therapy Services may have exposed names, SSNs, medical and financial info. Check if you're affected and enroll in protection...
Consumers whose personal information the THS data breach compromised may be eligible to claim up to $5000 from a class action settlement.
Therapeutic Health Services, a Seattle, WA-based provider of opioid addiction treatment, mental health counseling, and rehabilitation for...
In December 2024, CPAP Medical Supplies and Services Inc. (CPAP), a Jacksonville—a Florida-based provider of sleep therapy services and CPAP...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Therapeutic Health Services is http://www.ths-wa.org.
According to Rankiteo, Therapeutic Health Services’s AI-generated cybersecurity score is 713, reflecting their Moderate security posture.
According to Rankiteo, Therapeutic Health Services currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Therapeutic Health Services has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, Therapeutic Health Services is not certified under SOC 2 Type 1.
According to Rankiteo, Therapeutic Health Services does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Therapeutic Health Services is not listed as GDPR compliant.
According to Rankiteo, Therapeutic Health Services does not currently maintain PCI DSS compliance.
According to Rankiteo, Therapeutic Health Services is not compliant with HIPAA regulations.
According to Rankiteo,Therapeutic Health Services is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Therapeutic Health Services operates primarily in the Mental Health Care industry.
Therapeutic Health Services employs approximately 199 people worldwide.
Therapeutic Health Services presently has no subsidiaries across any sectors.
Therapeutic Health Services’s official LinkedIn profile has approximately 854 followers.
Therapeutic Health Services is classified under the NAICS code 62133, which corresponds to Offices of Mental Health Practitioners (except Physicians).
No, Therapeutic Health Services does not have a profile on Crunchbase.
Yes, Therapeutic Health Services maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/therapeutic-health-services.
As of January 23, 2026, Rankiteo reports that Therapeutic Health Services has experienced 1 cybersecurity incidents.
Therapeutic Health Services has an estimated 5,280 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an recovery measures with offering complimentary credit monitoring services to affected individuals..
Title: Therapeutic Health Services Data Breach
Description: The Vermont Office of the Attorney General reported that Therapeutic Health Services (THS) experienced a data breach on February 26, 2024, potentially affecting personal and medical information. Compromised data may include full name, Social Security number, date of birth, medical services information, and health records. THS has notified law enforcement and is offering complimentary credit monitoring services to affected individuals.
Date Detected: 2024-02-26
Date Publicly Disclosed: 2024-07-18
Type: Data Breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Full name, Social security number, Date of birth, Medical services information, Health information
Brand Reputation Impact: Potential negative impact due to exposure of sensitive personal and medical data
Identity Theft Risk: High (due to exposure of SSN, DOB, and personal health information)
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Identifiable Information (Pii), Protected Health Information (Phi) and .

Entity Name: Therapeutic Health Services (THS)
Entity Type: Healthcare Provider
Industry: Healthcare
Location: Vermont, USA

Incident Response Plan Activated: True
Recovery Measures: Offering complimentary credit monitoring services to affected individuals

Type of Data Compromised: Personal identifiable information (pii), Protected health information (phi)
Sensitivity of Data: High (includes SSN, medical, and health information)
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Offering complimentary credit monitoring services to affected individuals.

Regulations Violated: Potential HIPAA violation (if applicable), State data breach notification laws (e.g., Vermont’s Security Breach Notice Act),
Regulatory Notifications: Reported to the Vermont Office of the Attorney General

Source: Vermont Office of the Attorney General
Date Accessed: 2024-07-18
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Vermont Office of the Attorney GeneralDate Accessed: 2024-07-18.

Investigation Status: Ongoing (law enforcement notified)

Customer Advisories: Complimentary credit monitoring services offered to affected individuals
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Complimentary credit monitoring services offered to affected individuals.
Most Recent Incident Detected: The most recent incident detected was on 2024-02-26.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2024-07-18.
Most Significant Data Compromised: The most significant data compromised in an incident were Full name, Social Security number, Date of birth, Medical services information, Health information and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Health information, Full name, Medical services information, Date of birth and Social Security number.
Most Recent Source: The most recent source of information about an incident is Vermont Office of the Attorney General.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing (law enforcement notified).
Most Recent Customer Advisory: The most recent customer advisory issued was an Complimentary credit monitoring services offered to affected individuals.
.png)
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.
Azure Entra ID Elevation of Privilege Vulnerability
Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.
Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.