hptc.org Listed by abyss Ransomware Group

On July 26, 2025, the High Point Treatment Center in New Bedford, Massachusetts, appeared on the leak site of the Abyss ransomware group. The organization, which provides residential and outpatient treatment for chemical dependency as well as mental health services, had internal files exfiltrated during a ransomware attack. While the exact number of individuals affected remains unknown, any patient, employee, or family member whose records passed through the center could have personal information now at risk.

What's Publicly Reported from Reporting

Public reporting indicates that Abyss operators listed hptc.org on their leak site and claimed to have stolen internal files. The High Point Treatment Center treats both substance-use disorders and mental health conditions, meaning the compromised data likely includes sensitive medical and personal details. No precise count of records or specific data fields has been publicly detailed, but ransomware incidents of this type routinely expose names, dates of birth, Social Security numbers, contact information, insurance details, and clinical notes.

July 26, 2025 marks the public confirmation of the listing. The breach follows the group’s standard pattern of exfiltrating data before encrypting systems and then threatening to publish it unless a ransom is paid.

Why This Matters for You and Your Family

If you or a loved one has ever received care at High Point Treatment Center, your private information may now sit on a criminal leak site. Medical records are especially damaging when exposed because they can reveal substance-use history, mental health diagnoses, home addresses, and phone numbers. Criminals can use this information to file fraudulent tax returns, open accounts in your name, or pressure you with threats of embarrassment.

Children and teens treated at the center are equally exposed. Their information, once leaked, can follow them for decades and complicate future employment, education, or government benefits. Even if you were not a direct patient, an employee’s stolen file can contain your emergency contact details or insurance information, pulling you into the breach.

The Doxxing and Identity-Chain Implications

Stolen medical files rarely stay isolated. Attackers combine them with data from earlier breaches to build detailed profiles. A phone number from one leak links to an email from another; an old address connects to gaming accounts or social-media handles. This identity chain turns a single breach into long-term harassment, targeted scams, or full doxxing campaigns. Credential leaks of this kind frequently cascade into account takeovers on gaming platforms, where children’s usernames and passwords are reused across services.

Once the data appears on a ransomware leak site, other criminals copy it quickly. What starts as an extortion attempt against the treatment center can become dozens of smaller attacks against patients and their families.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity, then use the included cleanup of data brokers.
• Rotate any password you ever used at the High Point Treatment Center patient portal or staff systems, and enable 2FA through an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests and negotiations with data brokers on your behalf while you focus on securing accounts.

The incident shows that even organizations dedicated to helping vulnerable people can be hit, and the fallout lands squarely on patients and their families. A single breach can feed an identity chain that lasts for years unless you act quickly. Start by understanding exactly where your information surfaces online and stop the chain before criminals exploit it further.

DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that links handles to real identities, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Its specialists can help you close the gaps this claimed breach created and reduce the chance that your family becomes the next target.