NADAP Data Breach Exposes Personal Health Information of Over 5,000 Patients

The National Association on Drug Abuse Programs (NADAP) reported a data breach affecting personal and health information of clients and employees. The breach was discovered on January 10, 2026, but unauthorized access occurred on or around November 26, 2025. NYC Health + Hospitals confirmed that 5,086 patients had their protected health information (PHI) compromised, including names, Social Security numbers, and clinical information. NADAP has since enhanced security measures and notified relevant authorities, including law enforcement. Affected individuals are encouraged to monitor their credit and may be eligible for a class action lawsuit. NADAP is a key partner in NYC Health + Hospitals' Lead Health program, supporting underserved communities. The organization has provided resources for affected individuals to address potential identity theft.

Key Points: • NADAP experienced a data breach affecting over 5,000 patients' PHI. • Unauthorized access occurred on or around November 26, 2025. • Affected individuals are encouraged to monitor their credit and may pursue legal action.