Sensitive medical records held by Devereux Foundation were compromised in a ransomware attack, exposing Social Security numbers and protected health information. If you received a data breach notification letter from Devereux Foundation, our data breach lawyers want to hear from you.

What Happened?

According to a notice filed with the California AG Office, Devereux Foundation was hit by a ransomware attack. The suspicious activity was reportedly discovered on November 9, 2025. Information exposed in the breach reportedly included full names, Social Security numbers, medical information, and protected health information. Affected patients were notified by mail after the investigation was completed. The incident was reported to the U.S. Department of Health and Human Services and reportedly affected approximately 501 individuals. A ransomware group reportedly claimed responsibility for the attack and threatened to publish the stolen data.

If you are a patient who received care from Devereux Foundation, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

1. Monitor your credit reports and financial accounts for suspicious activity
2. Consider placing a fraud alert or credit freeze with all three major credit bureaus
3. Be alert to phishing emails or calls referencing the breach
4. Change passwords on any affected accounts and enable two-factor authentication
5. Keep a copy of your data breach notification letter for your records