Almeida Law Group is investigating a data breach at Averhealth Holdings. The breach occurred on an unspecified date and was discovered on an unspecified date. If you were affected, contact Almeida Law Group.
About Averhealth Holdings
Averhealth Holdings, headquartered in Glen Allen, Virginia, operates through its subsidiary Avertest Inc. to provide substance use disorder monitoring and drug testing services. The company primarily serves courts, probation offices, treatment courts, and social service and child welfare agencies across more than 30 states. Because of that role, Averhealth handles particularly sensitive information, including substance use disorder diagnoses, court-related monitoring records, and in some cases data tied to individuals involved in child welfare proceedings.
What Happened?
Averhealth Holdings was listed in an HHS Office for Civil Rights breach portal report submitted on July 2nd, 2026, identifying a hacking and IT incident affecting 9,909 individuals. The breached information was located in email.
According to Averhealth’s breach notice, as reported by ClassAction.org and ClaimDepot, unusual activity was detected in Avertest’s email environment on January 20th, 2026. An investigation conducted with external cybersecurity professionals determined that an unauthorized party had access to the network between December 19th, 2025 and January 21st, 2026. On May 6th, 2026, the company determined that files containing sensitive personal information were potentially accessed or acquired. Notification letters were mailed to affected individuals beginning July 2nd, 2026. Averhealth is offering complimentary credit monitoring to individuals whose Social Security numbers were impacted.
The exposed information reportedly varied by individual and may have included names, clinical information, diagnoses, digital and electronic signatures, dates of birth, driver’s license numbers, health insurance policy-related numbers, medical costs, dates of service, medical history, medical provider names, medical record numbers, treatment and procedure information, mental or physical conditions, patient account numbers, and Social Security numbers.
As of mid-July 2026, no class action lawsuit has been filed, but attorneys at ClassAction.org and the law firm Shamis & Gentile P.A. have publicly announced investigations into whether a class action can be brought on behalf of affected individuals. No ransomware group has publicly claimed responsibility for this incident based on available sources.
Key Facts at a Glance
- Company or Organization: Averhealth Holdings
- Industry: Healthcare / Substance Use Disorder Monitoring and Drug Testing
- Location: Glen Allen, Virginia (operates in 30+ states)
- Incident type: Hacking/IT Incident (Email)
- Date of breach: December 19th, 2025
- Date breach discovered: January 20th, 2026
- Date of consumer notification: July 2nd, 2026
- Total persons affected: 9,909
- Identity theft protection offered: Complimentary credit monitoring for individuals whose Social Security numbers were affected
- Litigation status: Under investigation by ClassAction.org and Shamis & Gentile P.A.; no class action filed as of mid-July 2026
- Source: HHS Office for Civil Rights Breach Portal; ClassAction.org; ClaimDepot
What Should You Do?
If you received a notice from Averhealth Holdings, start by enrolling in the complimentary credit monitoring the company is offering, particularly if your Social Security number was involved. You should also place a fraud alert or credit freeze with each of the three major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for anyone to open new accounts in your name. Review your credit reports for unfamiliar accounts or inquiries at AnnualCreditReport.com, and monitor your existing financial accounts for any suspicious activity. Because health and clinical information was involved in this breach, also review your Explanation of Benefits statements from your insurer and request copies of your medical records to check for any services you do not recognize. If you suspect identity theft has already occurred, report it at IdentityTheft.gov for a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
