Cerebral, Inc.’s Unauthorized Disclosure of Personal Health Information Investigation

An online mental health service, Cerebral, Inc., filed a notice about its use of website tracking tools to share personally identifiable information (“PII”) and protected health information (“PHI”) with third parties such as Google, Facebook, and TikTok. According to the notice filed with the U.S. Department of Health and Human Services (“HHS”), the shared information included names, phone numbers, email addresses, dates of birth, IP addresses, client ID numbers, demographic information, selected services, assessment responses and certain associated health information, subscription plan type, appointment dates, treatment and other clinical information, health insurance/pharmacy benefit information (e.g., plan name and group/member numbers), and insurance co-pay amounts. Though the sharing of information began in October 2019, it was not until January 2023 that Cerebral Inc.’s review of its tracking technologies determined it had disclosed “”PII” and “PHI.” The notice was sent to “HHS” on March 1, 2023, and three plus million users are being notified. If you or someone you know created an account with Cerebral Inc., completed a portion of Cerebral Inc.’s online self-assessment or purchased a Cerebral Inc. subscription plan, and would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569 , sending an email to [email protected] or completing the “Contact Us” form to the right.