Breaches and incidents
Cognitive Behavior Therapy Center (Chesapeake, Virginia): billing vendor Express Billing Systems hit by data theft and extortion, about 1,500 patients
Per HIPAA Journal, billing vendor Express Billing Systems found unauthorized network access on 24 Aug 2026 and files with names, addresses, phone numbers...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Per HIPAA Journal, billing vendor Express Billing Systems found unauthorized network access on 24 Aug 2026 and files with names, addresses, phone numbers, SSNs and diagnoses were copied; about 1,500 of the center’s patients are affected.
- Root cause: not fully disclosed; the vendor is adding staff training on phishing.
- No attacker named; some patients were contacted directly by the threat actor, per the report.
- The vendor says it has strengthened security.