• September 2026 •

Pavillon Data Breach

Last Updated on October 1, 2026

If your information was compromised in the Pavillon data breach, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the Pavillon data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you believe your information may have been compromised in the Pavillon data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the Pavillon breach.

Pavillon Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Pavillon data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the Pavillon data breach or otherwise believe they are affected.

Pavillon Security Incident: What Happened?

Pavillon International Inc., which operates a residential and outpatient addiction treatment center in North Carolina, has reported a data breach that may have exposed sensitive information.

According to a September 29, 2026 notice posted to its website, Pavillon was alerted to suspicious activity within its computer network on July 31 of the same year. An investigation with cybersecurity specialists revealed on August 7 that an unauthorized actor accessed and took data from the company's network.

Following a review of the impacted data, Pavillon determined that information belonging to current and former patients and employees was accessible on the compromised servers at the time of the incident.

Information that was potentially exposed in the Pavillon data breach, varying by individual, included names, medical diagnostic and treatment information, health insurance information and demographic information.

Social Security numbers, medical records, financial accounts and driver's licenses may have also been impacted, as reflected in a September 30 report submitted to the Massachusetts Office of Consumer Affairs and Business Regulation.

Pavillon is in the process of notifying individuals who were potentially affected by the incident; a sample notice letter is shown below.

Prior to the official disclosure, hacker group Global Secret Group claimed to be behind an attack on Pavillon that allegedly involved 646 gigabytes of data from the provider, according to an August 5, 2026 post on dark web surveillance platform Ransomware.live.

What You Can Do After the Pavillon Data Breach

If your information was exposed in the Pavillon data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, lost time, out-of-pocket costs, and more.

A successful case could also force Pavillon to ensure they take proper steps to protect the information they were entrusted with.

Affected by the Pavillon data breach? Fill out the form on this page today.