Richmond Behavioral Health Authority Data Breach Exposes Sensitive Patient Information

A news story has come out recently that has made me concerned about the possibility of having my data compromised. Richmond Behavioral Health Authority (RBHA) has announced that they were the victim of a major data breach. This breach affected more than 113,000 individuals, which is a tremendously large number. This is going to impact many people who have previously entrusted their private information to a healthcare organization.

How did this happen??​

Hackers used ransomware to infiltrate RBHA's Computer Systems. Hacker's targeted the computer systems at RBHA in late September 2025 using ransomware. The hackers were able to lock the data files of RBHA, as well as stole data from these files.

RBHA became aware of the attack the following day and was able to stop the attack as soon as it was discovered. However, it is possible that sensitive patient and member information could have been intercepted by the hackers before RBHA took action. Scary thought!!

What type of information was compromised?​

RBHA has indicated that hackers may have gained access to patient and member information such as:

• Full Names
• Social Security Numbers
• Passports
• Bank Account Information
• Medical and Health Records

In spite of the fact that RBHA was compromised, they recommend that individuals assume that if they are engaged with RBHA, they have been a victim of a data breach. And they should take all the precautions needed to safeguard their personal and medical information. This is a responsible action on the part of RBHA.

How This Affects You​

If your personal data is compromised, it can lead to identity theft, bank fraud, and numerous credit issues. I’ve dealt with a frozen card before, and it’s a real hassle. Wouldn’t you want to know if your information had been compromised?

RBHA Actions​

Currently, RBHA is working with cybersecurity experts and the government in an effort to increase security. They also plan on monitoring their system more closely to ensure that another breach does not occur.