Skip to main content
A graphic showing different healthcare related items and how they are interconnected

Operation PAR Data Breach Investigation

Written by Joseph Lyon on . Posted in Data Breach.

The data breach lawyers at The Lyon Firm are investigating a recently reported data breach incident involving Operation PAR, Inc., a Florida-based nonprofit providing addiction treatment and behavioral health services. Contact our legal team to learn more about data privacy litigation and to consider taking legal action following a data theft event that may have impacted you and your family. We represent clients in all fifty states.

What Happened at Operation PAR?

Operation PAR was allegedly targeted in a data security breach claimed by the WorldLeaks ransomware group. On June 10, 2025, PAR learned certain systems within their network were affected by unusual activity and began an investigation. WorldLeaks has reportedly added Operation PAR to its dark web leak site, suggesting that sensitive data may have been exfiltrated. The data leaked may include the following:

  • Names
  • Addresses
  • Dates of birth
  • Social Security numbers
  • Health insurance information

Operation PAR serves over 30,000 individuals annually, and tens of thousands could have been impacted in this incident. PAR offers residential addiction treatment, outpatient services, and prevention programs

The alleged breach, attributed to WorldLeaks—a ransomware group known for double extortion tactics— typically encrypts systems and threatens to release stolen data unless a ransom is paid quickly, a strategy that has pressured numerous healthcare organizations this year. The reports suggest that personal and health-related data from Operation PAR’s systems may have been compromised, though the exact scope—such as the volume of data, number of individuals affected or specific entry method—remains unknown.

The potential exposure of Operation PAR’s stored data carries increased privacy risks for its patients, employees, and partners. As a healthcare provider, the organization likely holds protected health information (PHI) including names, addresses, Social Security numbers, medical histories, and treatment details.

As the investigation moves forward, more details should emerge and impacted patients should get a data breach notification letter in the mail. Call us to discuss your legal options and to take the next steps as soon as possible.