ManAlive Inc.

ManAlive Inc. operates as an addiction treatment service provider in the United States, with its headquarters located in the country. The organization runs clinics that offer comprehensive care for individuals struggling with substance use disorders, including methadone maintenance therapy as indicated by the treatment records referenced in a known security incident. Its core mission centers on delivering medical and therapeutic support to patients seeking recovery from addiction.

In August 2016, one of ManAlive Inc.'s Baltimore‑based clinics experienced a security breach. The breach began when an employee received a malicious Word file through a social engineering phishing attempt. Opening the file allowed the attacker to compromise the employee’s workstation and gain access to the clinic’s patient database. The exposed database contained personal identifiers such as names, Social Security numbers, dates of birth, and contact information. It also included physical descriptions, driver’s license data, and treatment details like admission dates and methadone status. Approximately 860 individuals were affected by the disclosure of this information. The stolen data was subsequently posted for sale on a dark web marketplace. The attacker demanded a ransom of 15 Bitcoin to prevent further dissemination of the records. ManAlive Inc. chose not to pay the ransom. The incident was reported to federal health authorities, and law enforcement was notified of the breach. This episode underscores the organization’s responsibility for safeguarding protected health information under applicable federal regulations.