Security Incident at EHR Vendor Affects Patients of New York Counselling Practices
A security incident at an electronic health records vendor has led to the exposure of personal and health information belonging to patients of Hispanic Counseling Center and Brooklyn Counseling Services, two New York-based mental health practices. Both organizations have begun notifying affected patients.
Why this matters: Mental health records are some of the most sensitive data a person can have. These are not loyalty card details or email addresses. They include diagnoses, treatment histories, and details people shared in confidence. The breach happened at a vendor, not at the counseling practices themselves. That matters because patients had no say in which software their provider used. When third-party vendors hold sensitive data, the people whose information is at risk have no direct relationship with the company that failed them.
Who should care: Healthcare professionals · Privacy officers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.