Lawsuit Alleges Bradford Health Services Concealed Ransomware Attack that Compromised Sensitive Health Information of Hundreds of Thousands of Patients
BIRMINGHAM, AL – June 12, 2025 –DiCello Levitt today announced the filing of a federal class action lawsuit on behalf of former patients of Addiction and Mental Health Services, LLC d/b/a Bradford Health Services, following revelations of a massive data breach that the company concealed for more than eighteen months. The lawsuit, filed in the U.S. District Court for the Northern District of Alabama, alleges that Bradford failed to safeguard sensitive personal and medical information and intentionally delayed notifying affected individuals and authorities.
According to the complaint, cybercriminal group Hunters International infiltrated Bradford’s systems in December 2023, exfiltrating over 760GB of sensitive data including names, Social Security numbers, medical diagnoses and other medical information, health insurance information, financial account numbers, and more. Despite discovering the breach in late 2023, Bradford did not disclose the incident publicly until May 30, 2025—well beyond the 60-day notification window mandated by federal law.
“Bradford’s egregious failure to protect patient data and its intentional delay in disclosing the breach put thousands of vulnerable individuals at continued risk of identity theft, financial fraud, and medical privacy violations,” said Nada Djordjevic, partner in DiCello Levitt’s Privacy, Technology, and Data Security Practice Group. “Our clients entrusted Bradford with the most sensitive aspects of their lives. That trust was violated.”
The complaint details how Bradford executives, instead of informing affected parties, allegedly considered fabricating alternate explanations for their system outages—including blaming a lightning strike—while negotiating a $5 million ransom with the hackers. During this period, patients and employees remained unaware that their private health information was compromised and available to cybercriminals.
The named plaintiffs—F.P. of Birmingham, Alabama, and C.W. of Florida—describe harms ranging from financial fraud and identity theft to severe emotional distress and the ongoing costs of protective measures. One plaintiff discovered an unauthorized credit card account opened in his name shortly after the breach.
“Bradford not only failed to uphold basic data security protocols but then compounded that failure by concealing the breach,” said Amy Keller, co-chair of DiCello Levitt’s Privacy, Technology, and Data Security Practice Group. “This is about accountability—for the patients who trusted this facility at some of the most difficult moments of their lives,” said Eli Hare, a partner at DiCello Levitt, in the firm’s Birmingham, AL office.
The suit alleges violations of state consumer protection laws, negligence, and breach of contract, among other claims, resulting from Bradford’s failure to implement reasonable cybersecurity safeguards. The plaintiffs seek injunctive relief, damages, and ongoing monitoring for those affected.
A copy of the complaint is available online here.
The legal team in this matter is led by DiCello Levitt’s Nada Djordjevic, Amy Keller and Eli Hare.
About DiCello Levitt
At DiCello Levitt, we’re dedicated to achieving justice for our clients through public client, class action, environmental, mass tort, securities, financial services, antitrust, business-to-business, whistleblower, personal injury, and civil and human rights litigation. Our lawyers are highly respected for their ability to litigate and win cases—whether by trial, settlement, or otherwise—for people who have suffered harm, global corporations that have sustained significant economic losses, and public clients seeking to protect their citizens’ rights and interests. Every day, we put our reputations—and our capital—on the line for our clients.
DiCello Levitt has achieved top recognition as Plaintiffs Firm of the Year and Trial Innovation Firm of the Year by the National Law Journal, in addition to its top-tier Chambers and Benchmark ratings. For more information about the firm, including recent trial victories and case resolutions, please visit www.dicellolevitt.com.
Media Contact
Meg McEvoy
LIMELIGHT