Judge Baker Children’s Center, a well-known provider of mental health services for children, has recently reported a data security incident that may have compromised personal and protected health information. The breach was discovered on July 28, 2024, when unusual activity was detected within the organization’s digital storage environment. The center acted swiftly to secure its systems and enlisted independent cybersecurity experts to investigate the incident. Their efforts uncovered that an unauthorized actor gained access to the systems between July 26 and 28, potentially downloading sensitive files.
Following the investigation, it was confirmed that certain individuals’ personal and protected health information may have been impacted. The data exposed during the breach varies between individuals but could include sensitive information such as names, addresses, Social Security numbers, health insurance details, medical treatment information, and clinical records. The Baker Center stressed that they take the security and privacy of this information very seriously and deeply regret any concern this incident may cause.
On December 27, 2024, the center began notifying individuals whose information may have been compromised. Those with verifiable address information received formal letters informing them of the breach, along with steps they can take to monitor and protect their personal data. To further assist those affected, a toll-free call center has been established, where individuals can get more details about the incident and access additional support.
In response to the breach, The Baker Center is taking comprehensive steps to enhance its cybersecurity measures to prevent similar incidents in the future. The organization is committed to ensuring that sensitive information remains protected and is actively working to bolster its security infrastructure. The Baker Center has expressed its regret over the situation and remains focused on mitigating the impact on its patients and their families.