On July 23, 2026, Park Place Behavioral Healthcare, also known as Osceola Mental Health Inc., discovered unusual activity on its computer systems. The organization secured its environment and hired a third-party cybersecurity firm to investigate the incident. The forensic investigation concluded on August 19, 2026, confirming that an unauthorized party had copied certain information from Park Place's systems.
The breach exposed sensitive data, including names, Social Security numbers, dates of birth, driver’s license numbers, other government-issued ID numbers, financial account information, health information, health insurance information, and medical records. While the total number of affected individuals nationwide is not publicly disclosed, at least 52 Massachusetts residents were affected. Notification letters began mailing to affected individuals starting September 17, 2026.
Additional details, including a nationwide count of affected individuals, remain unclear and may emerge as further information becomes available or regulatory filings are made.