Beaver County Behavioral Health Says Ransomware Attack Copied Data
Summary
Beaver County Behavioral Health said ransomware was discovered July 8 and its investigation determined data, including protected health information, was copied. The review is ongoing; affected individuals will be notified. Updates: beavercountypa[.]gov.
Key points
- Beaver County Behavioral Health said it discovered ransomware on its computer system on July 8 and is working with federal law enforcement and cybersecurity and forensics consultants.
- The agency said its investigation determined that cyber criminals copied data from its network; the investigation and review of affected data are ongoing.
- Potentially affected information includes names, birth dates, Social Security and driver’s license numbers, health and treatment information, medications, and insurance details.
- The agency said the information relates to people who received or are receiving its services.
- The agency plans to send written notices after completing its review and has posted a notice at beavercountypa[.]gov.
- BCBH said it is monitoring its systems, data, and network access, and advised potentially affected people to review account statements, credit reports, and health insurance explanations of benefits for suspicious activity.
Article Details
- Victim Organization
- Beaver County Behavioral Health
- Victim Domain
- beavercountypa.gov
- Incident Type
- Ransomware attack with data copying from the agency's network
- Incident Date
- 2026-07-08
- Disclosure Date
- 2026-09-04
- Data Types Exposed
- Names
- Dates of birth
- Social Security numbers
- Driver's license numbers
- Dates of services
- Individual case identifying numbers
- Medical or health information
- Diagnosis and treatment information
- Healthcare provider names
- Medications
- Insurance identification numbers
- Insurance claims information
- Information related to services provided by Beaver County Behavioral Health
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The agency reported monitoring its systems, data, and network access and making changes to strengthen its network. No service disruption was reported.
- Ransom Or Extortion
- Not disclosed
- Claim Status
- confirmed