Retreat Behavioral Health - breach notification
December 30, 2022
Retreat Behavioral Health
c/o Cyberscout
PO Box 1286
Dearborn, MI 48120-9998
Dear ,
Retreat Behavioral Health (“RBH”) is an addiction treatment center with locations in Florida, Pennsylvania, and
Connecticut. We are writing to inform you of an incident that involved your personal information. We take the security
of your personal information seriously, and want to provide you with information and resources you can use to
protect your information. What Happened and What Information was Involved:
On July 1, 2022, we detected and stopped a ransomware attack, in which an unauthorized third party accessed some of
RBH’s computer systems. We immediately engaged a third-party forensic firm to assist us with securing the network
environment and investigating the extent of any unauthorized activity. That investigation identified a data set that may
have been accessed by the unauthorized person. RBH then performed an extensive and comprehensive review of the
data set and identified individuals whose personal information was in that data set. That investigation concluded on
December 9, 2022. We found no evidence that your information has been specifically misused; however, it is possible that the following
personal information could have been accessed by an unauthorized third party: first and last name, address, Social
Security number, and, in some cases, date of birth and medical and treatment information. Please be assured that your
financial account or payment card information were not compromised as a result of this incident. What We Are Doing:
Data security is one of our highest priorities. Upon detecting this incident, we moved quickly to initiate a response, which included retaining a leading forensic investigation firm who assisted in conducting an investigation along with
the assistance of leading IT specialists to confirm the security of our network environment. Additionally, we are
coordinating with the FBI. We have also deployed additional monitoring tools and will continue to enhance the
security of our systems. We value the safety of your personal information and are providing you with access to Single Bureau Credit Monitoring
services at no charge. These services provide you with alerts for twenty-four months from the date of enrollment when
changes occur to your credit file. This notification is sent to you the same day that the change or update takes place
with the bureau. In addition, we are providing you with proactive fraud assistance to help with any questions that you
might have, or in the event your identity is compromised. These services will be provided by Cyberscout, through
Identity Force, a TransUnion company specializing in fraud assistance and remediation services.
P
P000010102G0500
What You Can Do:
To enroll in Credit Monitoring services at no charge, please log on to
https://secure.identityforce.com/benefit/rbhealth and follow the instructions provided. When prompted please
provide the following unique code to receive services: . In order for you to receive the monitoring services
described above, you must enroll within 90 days from the date of this letter. The enrollment requires an internet
connection and e-mail account and may not be available to minors under the age of 18 years of age. Please note that
when signing up for monitoring services, you may be asked to verify personal information for your own protection to
confirm your identity.
Representatives are available for 90 days from the date of this letter, to assist you with questions regarding this incident, between the hours of 8:00 am to 8:00 pm Eastern time, Monday through Friday, excluding holidays. Please call the help
line 1-833-570-2560 and supply the fraud specialist with your unique code listed above. We encourage you to take full advantage of this service offering. The call center representatives have been fully versed
on the incident and can answer questions or concerns you may have regarding protection of your personal information.
Enclosed you will find additional information regarding the resources available to you, and the steps that you can take to
further protect your personal information.
For More Information:
If you have additional questions, please call the dedicated call center at 1-833-570-2560, Monday through Friday, 8:00
am to 8:00 pm Eastern time.
Sincerely,
Scott Korogodsky
Chief Administrative Officer
Additional Information
Credit Reports: You may obtain a copy of your credit report, free of charge, whether or not you suspect any unauthorized activity
on your account. You may obtain a free copy of your credit report from each of the three nationwide credit reporting agencies. To order your free credit report, please visit www.annualcreditreport.com, or call toll-free at 1-877-322-8228. You can also order
your annual free credit report by mailing a completed Annual Credit Report Request Form (available at
https://www.consumer.ftc.gov/articles/0155-free-credit-reports) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA, 30348-5281.
Security Freeze: You also have the right to place a security freeze on your credit report. A security freeze is intended to prevent
credit, loans, and services from being approved in your name without your consent. To place a security freeze on your credit
report, you need to make a request to each consumer reporting agency. You may make that request by certified mail, overnight
mail, regular stamped mail, or by following the instructions found at the websites listed below. The following information must
be included when requesting a security freeze (note that if you are requesting a credit report for your spouse or a minor under the
age of 16, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social
Security number; (3) date of birth; (4) current address and any previous addresses for the past five years; and (5) any applicable
incident report or complaint with a law enforcement agency or the Registry of Motor Vehicles. The request must also include a
copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. It is essential
that each copy be legible, display your name and current mailing address, and the date of issue. As of September 21, 2018, it is
free to place, lift, or remove a security freeze. You may also place a security freeze for children under the age of 16. You may
obtain a free security freeze by contacting any one or more of the following national consumer reporting agencies:
Fraud Alerts: You can place fraud alerts with the three credit bureaus by phone and online with: ∑ Equifax (https://assets.equifax.com/assets/personal/Fraud_Alert_Request_Form.pdf); ∑ TransUnion (https://www.transunion.com/fraud-alerts); or ∑ Experian (https://www.experian.com/fraud/center.html).
A fraud alert tells creditors to follow certain procedures, including contacting you, before they open any new accounts or change
your existing accounts. For that reason, placing a fraud alert can protect you, but also may delay you when you seek to obtain
credit. As of September 21, 2018, initial fraud alerts last for one year. Victims of identity theft can also get an extended fraud
alert for seven years. The phone numbers for all three credit bureaus are at the bottom of this page. Monitoring: You should always remain vigilant and monitor your accounts for suspicious or unusual activity.
File Police Report: You have the right to file or obtain a police report if you experience identity fraud. Please note that in order to
file a crime report or incident report with law enforcement for identity theft, you will likely need to provide proof that you have
been a victim. A police report is often required to dispute fraudulent items. You can generally report suspected incidents of
identity theft to local law enforcement or to the Attorney General.
FTC and Attorneys General: You can further educate yourself regarding identity theft, fraud alerts, security freezes, and the
steps you can take to protect yourself, by contacting the consumer reporting agencies, the Federal Trade Commission, or your state
Attorney General.
The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580, www.identitytheft.gov, 1-877-ID-THEFT (1-877-438-4338), TTY: 1-866-653-4261. The Federal Trade Commission also
Equifax Security Freeze Experian Security Freeze TransUnion Security Freeze
P.O. Box 105788 P.O. Box 9554 P.O. Box 160
Atlanta, GA 30348 Allen, TX 75013 Woodlyn, PA 19094
1-800-349-9960 1-888-397-3742 1-800-909-8872
https://www.equifax.com/personal/credit
-report-services/credit-freeze/
www.experian.com/freeze/center.html www.transunion.com/credit-freeze
P00001020280000
encourages those who discover that their information has been misused to file a complaint with them. You can obtain further
information on how to file such a complaint by way of the contact information listed above. You have the right to file a police
report if you ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity
theft, you will likely need to provide some proof that you have been a victim. Instances of known or suspected identity theft
should also be reported to law enforcement. This notice has not been delayed by law enforcement.
For District of Columbia residents, the Attorney General may be contacted at the Office of the Attorney General for the
District of Columbia, 441 4th Street NW, Washington, DC 20001, 1-202-727-3400, www.oag.dc.gov
Retreat Behavioral Health
c/o Cyberscout
PO Box 1286
Dearborn, MI 48120-9998
Dear ,
Retreat Behavioral Health (“RBH”) is an addiction treatment center with locations in Florida, Pennsylvania, and
Connecticut. We are writing to inform you of an incident that involved your personal information. We take the security
of your personal information seriously, and want to provide you with information and resources you can use to
protect your information. What Happened and What Information was Involved:
On July 1, 2022, we detected and stopped a ransomware attack, in which an unauthorized third party accessed some of
RBH’s computer systems. We immediately engaged a third-party forensic firm to assist us with securing the network
environment and investigating the extent of any unauthorized activity. That investigation identified a data set that may
have been accessed by the unauthorized person. RBH then performed an extensive and comprehensive review of the
data set and identified individuals whose personal information was in that data set. That investigation concluded on
December 9, 2022. We found no evidence that your information has been specifically misused; however, it is possible that the following
personal information could have been accessed by an unauthorized third party: first and last name, address, Social
Security number, and, in some cases, date of birth and medical and treatment information. Please be assured that your
financial account or payment card information were not compromised as a result of this incident. What We Are Doing:
Data security is one of our highest priorities. Upon detecting this incident, we moved quickly to initiate a response, which included retaining a leading forensic investigation firm who assisted in conducting an investigation along with
the assistance of leading IT specialists to confirm the security of our network environment. Additionally, we are
coordinating with the FBI. We have also deployed additional monitoring tools and will continue to enhance the
security of our systems. We value the safety of your personal information and are providing you with access to Single Bureau Credit Monitoring
services at no charge. These services provide you with alerts for twenty-four months from the date of enrollment when
changes occur to your credit file. This notification is sent to you the same day that the change or update takes place
with the bureau. In addition, we are providing you with proactive fraud assistance to help with any questions that you
might have, or in the event your identity is compromised. These services will be provided by Cyberscout, through
Identity Force, a TransUnion company specializing in fraud assistance and remediation services.
P
P000010102G0500
What You Can Do:
To enroll in Credit Monitoring services at no charge, please log on to
https://secure.identityforce.com/benefit/rbhealth and follow the instructions provided. When prompted please
provide the following unique code to receive services: . In order for you to receive the monitoring services
described above, you must enroll within 90 days from the date of this letter. The enrollment requires an internet
connection and e-mail account and may not be available to minors under the age of 18 years of age. Please note that
when signing up for monitoring services, you may be asked to verify personal information for your own protection to
confirm your identity.
Representatives are available for 90 days from the date of this letter, to assist you with questions regarding this incident, between the hours of 8:00 am to 8:00 pm Eastern time, Monday through Friday, excluding holidays. Please call the help
line 1-833-570-2560 and supply the fraud specialist with your unique code listed above. We encourage you to take full advantage of this service offering. The call center representatives have been fully versed
on the incident and can answer questions or concerns you may have regarding protection of your personal information.
Enclosed you will find additional information regarding the resources available to you, and the steps that you can take to
further protect your personal information.
For More Information:
If you have additional questions, please call the dedicated call center at 1-833-570-2560, Monday through Friday, 8:00
am to 8:00 pm Eastern time.
Sincerely,
Scott Korogodsky
Chief Administrative Officer
Additional Information
Credit Reports: You may obtain a copy of your credit report, free of charge, whether or not you suspect any unauthorized activity
on your account. You may obtain a free copy of your credit report from each of the three nationwide credit reporting agencies. To order your free credit report, please visit www.annualcreditreport.com, or call toll-free at 1-877-322-8228. You can also order
your annual free credit report by mailing a completed Annual Credit Report Request Form (available at
https://www.consumer.ftc.gov/articles/0155-free-credit-reports) to: Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA, 30348-5281.
Security Freeze: You also have the right to place a security freeze on your credit report. A security freeze is intended to prevent
credit, loans, and services from being approved in your name without your consent. To place a security freeze on your credit
report, you need to make a request to each consumer reporting agency. You may make that request by certified mail, overnight
mail, regular stamped mail, or by following the instructions found at the websites listed below. The following information must
be included when requesting a security freeze (note that if you are requesting a credit report for your spouse or a minor under the
age of 16, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social
Security number; (3) date of birth; (4) current address and any previous addresses for the past five years; and (5) any applicable
incident report or complaint with a law enforcement agency or the Registry of Motor Vehicles. The request must also include a
copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. It is essential
that each copy be legible, display your name and current mailing address, and the date of issue. As of September 21, 2018, it is
free to place, lift, or remove a security freeze. You may also place a security freeze for children under the age of 16. You may
obtain a free security freeze by contacting any one or more of the following national consumer reporting agencies:
Fraud Alerts: You can place fraud alerts with the three credit bureaus by phone and online with: ∑ Equifax (https://assets.equifax.com/assets/personal/Fraud_Alert_Request_Form.pdf); ∑ TransUnion (https://www.transunion.com/fraud-alerts); or ∑ Experian (https://www.experian.com/fraud/center.html).
A fraud alert tells creditors to follow certain procedures, including contacting you, before they open any new accounts or change
your existing accounts. For that reason, placing a fraud alert can protect you, but also may delay you when you seek to obtain
credit. As of September 21, 2018, initial fraud alerts last for one year. Victims of identity theft can also get an extended fraud
alert for seven years. The phone numbers for all three credit bureaus are at the bottom of this page. Monitoring: You should always remain vigilant and monitor your accounts for suspicious or unusual activity.
File Police Report: You have the right to file or obtain a police report if you experience identity fraud. Please note that in order to
file a crime report or incident report with law enforcement for identity theft, you will likely need to provide proof that you have
been a victim. A police report is often required to dispute fraudulent items. You can generally report suspected incidents of
identity theft to local law enforcement or to the Attorney General.
FTC and Attorneys General: You can further educate yourself regarding identity theft, fraud alerts, security freezes, and the
steps you can take to protect yourself, by contacting the consumer reporting agencies, the Federal Trade Commission, or your state
Attorney General.
The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580, www.identitytheft.gov, 1-877-ID-THEFT (1-877-438-4338), TTY: 1-866-653-4261. The Federal Trade Commission also
Equifax Security Freeze Experian Security Freeze TransUnion Security Freeze
P.O. Box 105788 P.O. Box 9554 P.O. Box 160
Atlanta, GA 30348 Allen, TX 75013 Woodlyn, PA 19094
1-800-349-9960 1-888-397-3742 1-800-909-8872
https://www.equifax.com/personal/credit
-report-services/credit-freeze/
www.experian.com/freeze/center.html www.transunion.com/credit-freeze
P00001020280000
encourages those who discover that their information has been misused to file a complaint with them. You can obtain further
information on how to file such a complaint by way of the contact information listed above. You have the right to file a police
report if you ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity
theft, you will likely need to provide some proof that you have been a victim. Instances of known or suspected identity theft
should also be reported to law enforcement. This notice has not been delayed by law enforcement.
For District of Columbia residents, the Attorney General may be contacted at the Office of the Attorney General for the
District of Columbia, 441 4th Street NW, Washington, DC 20001, 1-202-727-3400, www.oag.dc.gov
