Bloom Health Centers reports data security incident

PRESS RELEASE

TIMONIUM, Md., June 28, 2024 /PRNewswire/ — Psych Associates of Maryland LLC d/b/a Bloom Health Centers (“Bloom Health”), a provider of mental health services, has learned of a data security incident that may have affected the personal and protected health information of certain individuals. This notification provides information about the incident and the resources available to assist those individuals.

Please note: If you are unfamiliar with the name “Bloom Health,” certain patients may have originally been treated at companies acquired by Bloom Health, including Psych Associates of Maryland, Comprehensive Behavioral Health, and Kraus Behavioral Health.

On November 1, 2023, Bloom Health became aware of suspicious activity in the email inbox of a user associated with Bloom Health. Bloom Health immediately took steps to secure the mailbox and, with the assistance of a leading computer forensics firm, began an investigation to determine what had occurred and whether any protected information may have been accessed or obtained during the incident. As a result of the investigation, on December 6, 2023, Bloom Health confirmed that an employee’s mailbox may have been accessed without authorization. Bloom Health then engaged an independent team to conduct a comprehensive review of all data in the mailbox, which was completed on March 25, 2024. Bloom Health then worked diligently to determine current contact information for all individuals whose information was contained in the mailbox to initiate formal notification to those individuals, and address verification efforts were completed on June 10, 2024.

The information varies from person to person, but the information affected may include name, address, health insurance information, Medicaid/Medicare information, and medical information such as details of diagnoses, prescriptions, treatments, and procedures. In addition, for a limited number of individuals, the Social Security number, payment card number, and/or driver’s license number may be affected. Please note that we currently have no evidence of any misuse or attempted misuse of this information.

The privacy and security of patient data is of paramount importance to Bloom Health. The company has taken additional steps to enhance the security of its digital environment to minimize the likelihood of a similar incident in the future. Bloom Health has also established a toll-free call center to answer questions about the incident. Call center representatives can be reached Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time at 1-800-939-4170.

Never miss a story from Psych Associates of Maryland LLC again.