VNS Health, also known as VNS Behavioral Health Inc., discovered suspicious activity in an employee's email account on June 26, 2025. An investigation determined that an unauthorized third party had access to the email account between June 12, 2025, and June 26, 2025, due to a phishing incident.
The breach affected 739 individuals in the United States. Exposed data may have included names, Social Security numbers, dates of birth, addresses, government IDs such as driver’s license numbers, Medicare/Medicaid numbers, and certain health-related information, including indications relating to substance use disorder or psychiatric evaluation data. VNS Health posted a notice on its website and reported the incident to the U.S. Department of Health and Human Services on February 18, 2026.
Further details about this incident, including potential state-specific impacts, may emerge over time. Affected individuals may receive direct notification regarding the specifics of their exposed information.