Circle Park Behavioral Health Services Notifies Individuals Served of Data Security Incident

December 30, 2025 – Florence County Commission on Alcohol & Drug Abuse- dba Circle Park Behavioral Health Services (“Circle Park”) provides a range of behavioral health services, with emphasis on educational and professional counseling programs related to alcohol, tobacco, and other drug abuse. Circle Park is based in Florence County, South Carolina. Circle Park experienced a data security incident that may have impacted data belonging to current and former individuals served by Circle Park. Circle Park sent notifications about this incident to potentially affected individuals and has provided resources to assist them.

On March 8, 2025, Circle Park became aware of unusual activity within its environment. Upon discovery, Circle Park took steps to secure its network and engaged a leading, independent cybersecurity firm to investigate what happened and whether any sensitive data may have been impacted. The investigation subsequently revealed that certain personal information and personal health information may have been accessed and acquired without authorization by an unknown actor during the incident.

Based on the investigation, the personal and protected health information involved in the incident varied by individual. Still, it may have included the patient’s name, Social Security number, driver’s license number, state identification number, date of birth, health insurance information, and medical treatment and/or history.

As soon as Circle Park learned of the incident, it took the steps referenced above. In addition, Circle Park has implemented several measures to enhance our security posture and reduce the risk of similar incidents in the future.

Circle Park conducted a comprehensive review of potentially affected data to identify the individuals and information involved. On December 30, 2025, Circle Park provided written notification of the incident to impacted individuals with available address information via US mail. In this notification letter, Circle Park provided information about the incident and resources that potentially impacted individuals could utilize to protect their information. Circle Park also offered individuals the opportunity to enroll in complimentary monitoring and identity protection services through IDX.

Circle Park has established a toll-free call center with IDX to answer questions about the incident and to address related concerns. The IDX call center is available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time (excluding major U.S. holidays) and can be reached at 1-877-608-6023.

The privacy and protection of personal and protected health information is our top priority, and Circle Park deeply regrets any inconvenience or concern this incident may cause.

We are providing the following information to help those wanting to know more about steps they can take to protect themselves and their personal information:

What steps can I take to protect my personal information?

• Please notify your financial institution immediately if you detect any suspicious activity on any of your accounts, including unauthorized transactions or new accounts opened in your name that you do not recognize. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to the proper law enforcement authorities.
• You can request a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To do so, please visit www.annualcreditreport.com or call toll-free at 1-877-322-8228 once every 12 months, free of charge. Contact information for the three nationwide credit reporting agencies is listed below.
• You can take steps recommended by the Federal Trade Commission to protect yourself from identity theft. The FTC’s website offers helpful information at ftc.gov/idtheft.

How do I obtain a copy of my credit report?

You can obtain a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To order your credit report, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll-free at 1-877-322-8228. Use the following contact information for the three nationwide credit reporting agencies:

How do I put a fraud alert on my account?

You may consider placing a fraud alert on your credit report. This fraud alert statement informs creditors of possible fraudulent activity within your report and requests that your creditors contact you before establishing any accounts in your name. To place a fraud alert on your credit report, contact Equifax, Experian, or TransUnion and follow the Fraud Victims’ instructions. To place a fraud alert on your credit accounts, contact your financial institution or credit provider. Contact information for the three nationwide credit reporting agencies is also listed below.

How do I put a security freeze on my credit reports?

You have the right to place a security freeze on your credit report. A security freeze is intended to prevent credit, loans, and services from being approved in your name without your consent. To place a security freeze on your credit report, you need to request each consumer reporting agency. You may make that request by certified mail, overnight mail, regular stamped mail, or online by following the instructions on the websites listed below. You will need to provide the following information when requesting a security freeze (note that if you are requesting your spouse, this information must be provided for them as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) address. You may also be asked to provide other personal information, such as your email address, a copy of a government-issued identification card, and a copy of a recent utility bill, bank, or insurance statement. Each copy must be legible, display your name and current mailing address, and the date of issue. There is no charge to place, lift, or remove a freeze. You may obtain a security freeze by contacting any one or more of the following national consumer reporting agencies:

What should I do if I suspect that my family member was involved in the incident and is deceased?

You may choose to notify the three major credit bureaus, Equifax, Experian, and Trans Union, and request that they flag the deceased’s credit file. This will prevent the credit file information from being used to open credit. Mail your request, along with a copy of your family member’s death certificate, to each company at the addresses above.

What should I do if I suspect that my minor child’s or protected person’s information was involved in the incident?

You can request that each of the three national credit reporting agencies perform a manual search for a minor’s or protected person’s Social Security number to determine if there is an associated credit report. Copies of identifying information for the minor and the parent/guardian may be required, including a birth or adoption certificate, a Social Security card, and a government-issued identification card. If a credit report exists, you should request a copy of the report and immediately report any fraudulent accounts to the credit reporting agency. You can also report any misuse of a minor’s information to the FTC at https://www.identitytheft.gov/. For more information about Child Identity Theft and instructions for requesting a manual Social Security number search, visit the FTC website: https://www.consumer.ftc.gov/articles/0040-child-identity-theft. Contact information for the three credit reporting agencies is available above.