On August 4, 2025, Rehabilitative Health Services in Ammon, Idaho, appeared on the leak site of the beast ransomware group. The organization, which provides addiction recovery, family medicine, therapy, counseling, and psychological testing, is claimed to have had internal files exfiltrated during a ransomware attack. Public reporting indicates that the number of individuals whose data was exposed remains unknown.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
What Public Reporting Shows
Rehabilitative Health Services has operated in the Ammon community for more than 25 years. The facility treats patients from childhood through adulthood for both physical and mental health needs. Available reporting describes the incident as a ransomware attack in which attackers gained access, exfiltrated internal files, and later listed the organization on their public leak site hosted on the dark web. No confirmed total of affected patients or employees has been released. The data involved consists of internal documents rather than a single structured database of records.
Why This Matters for You and Your Family
When a local health provider is breached, the people most likely to be affected are ordinary families who sought counseling, addiction support, or medical care. Medical and mental health records are among the most sensitive categories of personal information. Exposure can lead to insurance fraud, stigma, or blackmail attempts targeting vulnerable individuals or families dealing with addiction or trauma. Even if your specific file is not publicly posted, the breach signals that information you entrusted to a caregiver may now sit in attackers’ hands, increasing the chance that it surfaces later through resale or further leaks.
The Doxxing and Identity-Chain Implications
Health records frequently contain full names, addresses, dates of birth, phone numbers, email addresses, insurance details, and notes on family relationships. Attackers can combine these with data from previous breaches to build detailed profiles. A single leaked therapy note can link a parent’s name to a child’s school records or a family member’s social-media handle. These connections create doxxing chains that expose home addresses, phone numbers, and online personas. Credential leaks from such incidents often cascade into gaming-account takeovers, especially for children and teenagers who reuse passwords or email addresses tied to family health accounts.