Devereux Foundation

Devereux Advanced Behavioral Health disclosed a ransomware attack involving information belonging to patients, employees, family members, donors and business partners. The potentially exposed data included combinations of Social Security numbers, financial information, government identification, medical information and health insurance information. Devereux provides behavioral health and developmental disability services across multiple states, giving the incident a broad geographic footprint. The attack highlights the impact ransomware is having on organizations serving vulnerable patient populations.