Almeida Law Group is investigating a data breach at SunCloud Health. If you were affected, contact Almeida Law Group.
About SunCloud Health
SunCloud Health is a private behavioral health treatment network founded in 2016 and headquartered in Northbrook, Illinois, with additional locations in Naperville, Chicago (Lincoln Park), and Matteson, Illinois, as well as a location in Gaithersburg, Maryland. The organization provides intensive outpatient programs, partial hospitalization programs, and residential treatment for adults and adolescents dealing with addiction, eating disorders, mood disorders, and trauma or PTSD. Because SunCloud Health treats highly sensitive behavioral health conditions, the types of information it handles are among the most personal a healthcare provider can hold.
What Happened?
SunCloud Health was listed in an HHS Office for Civil Rights breach portal report submitted on July 23rd, 2026. The incident is categorized as a hacking or IT incident involving email. A total of 2,594 individuals were affected. No business associate was involved in the breach. The HHS filing does not specify what types of personal or health information were contained in the affected email accounts.
No media reporting, ransomware group claims, or official notification letters specific to this incident were found in public sources as of the research date.
Key Facts at a Glance
- Company or Organization: SunCloud Health
- Industry: Behavioral health / addiction and eating disorder treatment (Healthcare Provider — Clinics/Outpatient Services)
- Location: Northbrook, Illinois (additional locations in Naperville, Chicago [Lincoln Park], Matteson, IL, and Gaithersburg, MD)
- Incident type: Hacking/IT Incident — Email
- Date of consumer notification: July 23rd, 2026
- Total persons affected: 2,594
- Source: HHS Office for Civil Rights breach portal report; SunCloud Health official website; PitchBook company profile
What Should You Do?
If you received a notice from SunCloud Health, take steps now to protect yourself. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open new accounts in your name. Monitor your existing financial accounts for unusual activity and request your free credit reports at AnnualCreditReport.com. If you learn that health or medical information was among the data involved, review your Explanation of Benefits statements and medical records for any services you did not receive, and report any suspicious activity to IdentityTheft.gov. Because SunCloud Health provides behavioral health treatment, stay alert to any unexpected communications that may reference your treatment history.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
