Notice of Data Privacy Event

NOTICE OF DATA PRIVACY EVENT

March 18, 2026:

New Horizons Behavioral Health (“New Horizons”) is providing notice of an event which may impact the privacy of information related to certain individuals. New Horizons is not aware of any identity theft, fraud or actual misuse of the involved information at this time, but is nonetheless notifying potentially impacted individuals in order to provide information about the event, and to provide resources that potentially impacted individuals can take advantage of to better protect against potential misuse of their information, should they feel it appropriate to do so.
 

What Happened?

On January 18, 2026, New Horizons observed suspicious activity on our computer network. Upon becoming aware of this activity, we immediately launched an investigation to determine the nature and scope of the activity. We also took significant steps to ensure we could continue to securely treat patients while our investigation was ongoing. The investigation determined an unauthorized actor gained access to our network between January 15 and January 18, 2026, and accessed and/or obtained certain files during that time period. Upon determining this information, New Horizons began a diligent and comprehensive review in order to identify the individuals whose information may have been included in the impacted files, and in order to attempt to locate address information for potentially impacted individuals so it could proceed with notification. While New Horizons is working as quickly as possible, with the assistance of third-party subject matter specialists, that review is ongoing. Once complete, New Horizons will mail written notification letters to potentially impacted individuals for whom we could locate an address.
 

What Information Was Involved?

The actual types of data impacted will vary by individual but we anticipate that some or all of the following information was found in the impacted files: name, address, date of birth, Social Security number, driver’s license number, financial account information, and medical and/or health insurance information including, but not limited to, prescription information, treatment location and information, medical diagnosis, medical record numbers, provider name, health insurance policy information and identification numbers, and other similar types of information. Once New Horizons completes its comprehensive review of the impacted files, it will include information on the impacted types of data in the letters that are mailed to notified individuals.
 

What We Are Doing:

The confidentiality, privacy, and security of information within our care is among our highest priorities. Upon learning of this event, New Horizons conducted a diligent investigation, took prompt steps to ensure the security of its network, and conducted a comprehensive review of information potentially affected. New Horizons also enhanced its existing security protocols. New Horizons will also be offering complimentary credit monitoring to all notified individuals once the review of impacted files is complete.
 
For More Information. If you have additional questions, please contact New Horizons Behavioral Health’s toll-free dedicated assistance line at 1-800-405-6108, Monday through Friday, excluding holidays, from 8:00 am to 8:00 pm Eastern time. You may also write to New Horizons Behavioral Health at 2100 Comer Avenue, Columbus, GA 31906.
 

Additional Information:

Consumers may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps they can take to protect your personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Consumers can obtain further information on how to file such a complaint by way of the contact information listed above. Consumers have the right to file a police report if they ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, consumers will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and the relevant state Attorney General. This notice has not been delayed by law enforcement.