Riverside Community Care

Riverside Community Care, also known as Riverside Community Care, is a behavioral healthcare provider headquartered in the United States of America. The organization delivers behavioral health services to individuals and communities within its service area. As part of its operations, it maintains patient records that include discharge summaries, medication information, and home health care plans. These records reflect the organization’s role in managing both mental health conditions and related home‑based care needs. The provider’s work involves handling protected health information and personal details of its staff and patients.

On October 21, 2020, Riverside Community Care experienced a ransomware attack in which attackers exfiltrated sensitive data. The compromised data included staff personal details such as names, home addresses, and cellphone numbers. Additionally, protected health information was taken, comprising patient discharge summaries listing medications and a home health care plan detailing a schizophrenia diagnosis. The attackers posted the stolen information on a dedicated leak site. Despite the public availability of the leaked data, the organization did not issue a public acknowledgment, notify affected patients, or appear in regulatory breach reports at the time of the report’s publication. This incident highlights the organization’s responsibility to safeguard confidential information and the potential consequences of insufficient breach disclosure practices. The event remains a notable example of a ransomware incident affecting a behavioral healthcare provider in the United States.