Data Breach Desk
Investigations/2026 filings/BestCare Treatment Services
● Active investigationHHS OCR · filed September 2026Unauthorized Access/Disclosure

BestCare Treatment Services Data Breach: 4,216 People's Medical Privacy Breach

BestCare Treatment Services disclosed a data breach that exposed names and medical information. If you received a notice, here's what it means — and what you can do.

Published on databreachdesk September 3, 2026 · Reviewed against the official U.S. Dept. of Health & Human Services (OCR) filing
At a glance — from the official filing
People affected
4,216
Data exposed
Name + Medical
Cause
Unauthorized Access/Disclosure
Sensitivity
High
Notices sent
September 2026

What information was exposed

Per the company's filing — only the items below were involved. We don't pad the list.

Full nameSocial Security numberSSN (last 4 digits)Date of birthAddressDriver's licenseMedical infoFinancial / bank

Why medical-information exposure is serious

Medical records are among the most sensitive personal data that exist. Unlike a leaked password, exposed medical history cannot be "rotated" — a diagnosis, prescription history, or treatment record stays sensitive for life and can affect insurance, employment, and personal privacy.

Medical data is also valuable to identity thieves. It can be combined with other exposed identifiers to commit medical identity theft — filing fraudulent insurance claims, obtaining prescriptions, or even contaminating a victim's medical records with someone else's history.

What affected individuals can do right now

Regardless of any legal action, if you received a notice there are protective steps worth taking:

Timeline

September 3, 2026
Affected individuals notified; filing submitted to U.S. Dept. of Health & Human Services (OCR)
View the official HHS OCR record
Investigation led byVert Law

Were you affected by the BestCare Treatment Services breach?

A class-action investigation is underway. If you received a notice, you may be eligible for compensation. Checking takes about two minutes.

No cost to you No obligation Takes 2 minutes

Your information is kept private and used only to evaluate your claim.

By submitting, you consent to Data Breach Desk sharing your details with the investigating law firm to assess your potential eligibility, and to being contacted about it. Attorney Advertising. Submitting this form is not legal advice and does not create an attorney-client relationship.

Common questions

Is the BestCare Treatment Services data breach a confirmed lawsuit?

An investigation into a potential class action is underway. Whether a suit is ultimately filed depends on the facts and on counsel's assessment. Signing up registers your interest and lets attorneys evaluate eligibility — it is not itself a lawsuit.

Does it cost anything to join?

Class action representation in cases like this is typically handled on a contingency basis, meaning no upfront cost to you. Always confirm terms directly with the representing attorneys.

What if I'm not sure I was affected?

If you received a notification letter from BestCare Treatment Services, you were among those identified as affected. If you're unsure, the letter is the definitive indicator.