BayMark Health Services Data Breach: What You Should Know

Lemberg Law is investigating a recent data breach involving BayMark Health Services, the parent company of several healthcare treatment centers. If you received a notice from BayMark, your sensitive health and personal information may have been exposed.

What Happened?

On October 11, 2024, BayMark detected a cybersecurity incident that disrupted its IT systems. According to the company, the breach did not impact operations at its affiliated treatment facilities—such as BAART Programs, MedMark Treatment Centers, or Healthcare Resource Centers—but did involve data held by BayMark on their behalf. A forensic investigation determined that an unauthorized party accessed files between September 24 and October 14, 2024.

Exposed Information

On March 20, 2025, BayMark concluded that the compromised files may have included:

• Full name
• Social Security number
• Driver’s license number
• Date of birth
• Health insurance details
• Treatment, diagnosis, provider, and service date information

BayMark’s Response

BayMark says it has taken steps to strengthen its cybersecurity and prevent similar events. The company is offering one year of free identity protection and credit monitoring services through Equifax Complete™ Premier, which includes fraud alerts, credit report access, and identity theft insurance.

What You Should Do

If you received a data breach notice from BayMark:

1. Consider enrolling in credit monitoring to help detect identity theft early
2. Monitor your medical, insurance, and financial statements for suspicious activity
3. Place a fraud alert or credit freeze with the credit bureaus if necessary
4. Contact Lemberg Law to learn your legal options and whether you may qualify for compensation

Need Help?

If BayMark Health Services notified you about this data breach, you may be eligible for legal remedies. Lemberg Law offers free case evaluations—and you don’t pay unless we win.

Source: California Department of Justice