Did Devereux Foundation have a data breach?

In plain terms

The Devereux Foundation reported a data security incident to the California Attorney General, confirming unauthorized access to their systems. This incident, occurring on November 6, 2025, potentially exposed personal information handled by the behavioral healthcare organization. Individuals who received a notification letter should review its contents carefully.

The Devereux Foundation, a non-profit behavioral healthcare provider, formally reported a data security incident to the California Attorney General on July 23, 2026. This filing confirms that their systems were subjected to unauthorized access on November 6, 2025. The investigation into the incident is currently ongoing.

Given the nature of the Foundation's services, they routinely collect and maintain highly sensitive personal information for clinical, billing, and administrative purposes. The reported breach means that this information could have been exposed due to the unauthorized system access.

If you have received an official data breach notification letter from the Devereux Foundation, it indicates that your personal information was likely part of the data compromise. The specific categories of data involved were not detailed in the public filing, but any unauthorized access to such systems is a serious concern.

To help protect yourself, it is advisable to remain vigilant. Closely monitor your financial accounts and credit reports for any suspicious activity. Consider placing a fraud alert or security freeze on your credit files as an added precaution. Be cautious of unsolicited communications, such as emails or calls, that ask for personal details.

Always rely on official communications from the Devereux Foundation for specific guidance related to this incident. Taking these general protective steps can help mitigate potential risks associated with your exposed data.