US-MA
Timeline
- November 2024Press coverage Press
press report (press_reported): a November 2024 cyberattack and data breach that affected 12,633 individuals.
source - May 30, 2025Press coverage Press
press report (individuals_notified): The company notified affected individuals about the data breach on May 30, 2025.
source - May 30, 2025Reported to regulator Regulator
MA AG breach notification: 12,633 Massachusetts residents affected
source - June 8, 2025Litigation filed Court
RECAP docket 3:25-cv-30110 (mad): Grant v. Mental Health Association, Inc.
source
Litigation
- Case filed — docket on CourtListener
What a Massachusetts notice means
Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.