Southwest Behavioral & Health Services identified suspicious activity in its email environment on April 1, 2026. The company later determined that an unauthorized actor accessed information in six employee email accounts. Southwest Behavioral & Health Services completed its review on April 30, 2026, and began notifying impacted individuals on May 27, 2026.
The public notice does not specify the types of information involved or the number of affected individuals. It also does not state whether Social Security numbers, medical information, or financial information were included. The available notice identifies an email-account compromise, but does not describe a third-party vendor breach or provide a regulator notification date. Further details may be disclosed as notices and regulatory records become available.