Provident Behavioral Health, a St. Louis, Missouri-based behavioral health organization, disclosed a data security incident that it discovered on April 3, 2026. The incident affected personal information tied to former patients of Care and Counseling, an organization that merged into Provident Behavioral Health in 2023. The notification list was finalized on August 28, 2026.
The confirmed data type involved was names. The notification letter template indicated other data categories, but these were not publicly disclosed. It is unclear how many individuals were affected or which specific states were impacted beyond Missouri. Provident Behavioral Health took custody of Care and Counseling's patient files in 2023 and became responsible for safeguarding them.
Additional details about the breach, such as the full scope of affected data types and precise number of impacted individuals, may emerge as the situation develops. Consumer notification processes are underway for those whose information was involved.