type: incident · created: 2026-07-25 · updated: 2026-07-25 · tags: [incident, insider-threat, sector-healthcare] · confidence: high · affected_sectors: [healthcare] · au_impact: false
Colorado Behavioral Healthcare Provider Discovers Insider Data Breach
Multiple healthcare providers announced breaches including NAS Recovery Solutions, Entyre Care Massachusetts, Carle Health, and Brown Health Medical Group-MA. Insider threat remains a persistent vector in the sector.
Overview
| Attribute | Detail |
|---|---|
| Date | 2026-07-23 |
| Sector | Healthcare (behavioral health, recovery services, general) |
| Affected Organisations | NAS Recovery Solutions, Entyre Care Massachusetts, Carle Health, Brown Health Medical Group-MA |
| Vector | Insider threat |
| Source | HIPAA Journal |
| Reliability | Tier 2/4 — High |
Significance
Insider breaches in healthcare are particularly damaging because of the sensitivity of medical and mental health records. Multiple providers being affected simultaneously suggests either a coordinated attack vector or a systemic vulnerability in healthcare data access controls.
Related Pages
- Tennessee Pathology Group 170K Breach — Pathology lab 170K-record breach
- Malicious Insider Incidents Surge Report — Report on insider incident surge
- Ohio Revenue Cycle Patient Data Exposure — Third-party revenue cycle exposure