Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible TrueCore Behavioral Solutions data breach. According to dark web monitoring sources, a hacker group calling itself Storm claimed responsibility for a cyberattack on TrueCore Behavioral Solutions in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, TrueCore Behavioral Solutions has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About TrueCore Behavioral Solutions
TrueCore Behavioral Solutions, formerly known as G4S Youth Services, is a behavioral health treatment provider headquartered in Tampa, Florida. Established in 2001, the organization serves at-risk and adjudicated youth aged 13 to 21 through residential treatment facilities and community-based programs offering mental health treatment, substance abuse treatment, family therapy, and juvenile justice services. TrueCore is a contract provider for the Florida Department of Juvenile Justice and operates facilities across multiple states, employing licensed clinical social workers, therapists, registered nurses, and case managers.
What Happened?
On September 21st, 2026, Ransomware.live reported that the Storm ransomware group listed TrueCore Behavioral Solutions on its dark-web leak site. This is an attacker-side allegation only. TrueCore has not publicly confirmed any breach or ransomware incident, no regulator filing has surfaced, and no independent news source has corroborated the claim. The specific data types involved, the volume of any data allegedly taken, and the dates of any breach or discovery have not been specified by any source. No independent corroborating source was found.
Storm is an emerging ransomware-as-a-service group first observed in August 2026, according to WatchGuard’s ransomware tracker. It operates a double-extortion model using a dark-web leak site. Microsoft Threat Intelligence has separately identified a threat actor designated Storm-1175, which deployed a ransomware strain called StormEncryptor beginning August 2nd, 2026, reportedly exploiting a vulnerability in N-able products. It is not confirmed whether the “Storm” group tracked by Ransomware.live is the same entity as Microsoft’s Storm-1175 designation. Storm has claimed other victims since August 2026, including at least one other healthcare organization.
Key Facts at a Glance
- Company or Organization: TrueCore Behavioral Solutions
- Industry: Healthcare / Behavioral Health / Juvenile Justice Services
- Location: Tampa, Florida (headquarters); facilities in multiple states
- Incident type: Ransomware claim (attacker-side allegation only; unconfirmed by organization)
- Prior breach: No prior data breaches or cybersecurity incidents found
- Litigation status: No litigation related to this incident found
- Source: Ransomware.live – TrueCore Behavioral Solutions; WatchGuard – Storm Ransomware Tracker; GBHackers – Storm-1175 Launches StormEncryptor Ransomware Attacks; PR Newswire – TrueCore Behavioral Solutions announces new name and corporate ownership; Florida DJJ – TrueCore Contract Provider Page
What Should You Do?
Because the specific data involved in the alleged incident has not been disclosed, you should take broad precautionary steps. Consider placing a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent unauthorized accounts from being opened in your name. Monitor your financial accounts and credit reports closely; you can request free reports at AnnualCreditReport.com. If you believe you may be a victim of identity theft, report it at IdentityTheft.gov for a personalized recovery plan. Continue to watch for any notification from TrueCore Behavioral Solutions or regulators with more specific information about what data may have been affected.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
