NOTICE OF DATA PRIVACY EVENT
Updated September 16, 2026 – New Horizons Behavioral Health (“New Horizons”) is writing to supplement its prior notification in order to provide updated information regarding an event which may impact the privacy of information related to certain individuals. Specifically, and as described in greater detail below, New Horizons has now completed its review of the data impacted in this event, and has mailed notification letters to potentially impacted individuals for whom New Horizons had address information.
What Happened? On January 18, 2026, New Horizons observed suspicious activity on our computer network. Upon becoming aware of this activity, we immediately launched an investigation to determine the nature and scope of the activity. We also took significant steps to ensure we could continue to securely treat patients while our investigation was ongoing. The investigation determined an unauthorized actor gained access to our network between January 15 and January 18, 2026, and accessed and/or obtained certain files during that time period. Upon determining this information, New Horizons began a diligent and comprehensive review in order to identify the individuals whose information may have been included in the impacted files, and in order to attempt to locate address information for potentially impacted individuals so it could proceed with notification. New Horizons provided notification to media outlets in Georgia while the review was ongoing, and also provided notification on its website. That review was recently completed, and New Horizons has now mailed notice letters to potentially impacted individuals for whom New Horizons was able to locate address information.
What Information Was Involved? The actual types of data impacted vary by individual and is listed in the notice letter specific to the individual. While the notice letter will contain what specific information was impacted for the recipient, in general, the following types of information were found in the impacted files: name, address, date of birth, Social Security number, driver’s license number, financial account information, and medical and/or health insurance information including, but not limited to, prescription information, treatment location and information, medical diagnosis, medical record numbers, provider name, health insurance policy information and identification numbers, and other similar types of information.
What We Are Doing. The confidentiality, privacy, and security of information within our care is among our highest priorities. Upon learning of this event, New Horizons conducted a diligent investigation, took prompt steps to ensure the security of its network, and conducted a comprehensive review of information potentially affected. New Horizons also enhanced its existing security protocols.
For More Information. If you have additional questions, please contact New Horizons Behavioral Health’s toll-free dedicated assistance line at 1-833-918-1153, Monday through Friday, excluding holidays, from 8:00 am to 8:00 pm Central Time. You may also write to New Horizons Behavioral Health at 2100 Comer Avenue, Columbus, GA 31906.
Additional Information Consumers may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps they can take to protect your personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Consumers can obtain further information on how to file such a complaint by way of the contact information listed above. Consumers have the right to file a police report if they ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, consumers will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and the relevant state Attorney General. This notice has not been delayed by law enforcement.