Equilibria Mental Health Services reports phishing attack, data breach
Learn More
Equilibria Psychological and Consultation Services, a mental health services provider serving Philadelphia and surrounding areas reports a data breach that exposed sensitive patient information via a phishing attack in June 2025.
The cybersecurity incident was discovered on June 24, 2025. I was determined that two internal email accounts authorized for business operations were breached due to an email phishing scam. The attack instructed recipients to open documents that appeared to require signatures while simultaneously requesting their email login credentials.
The attackers accessed emails with personal data of patients. Exposed data includes:
- Names
- Email addresses
- Mailing addresses
- Physical addresses
- Telephone numbers
- Health insurance plan information
- Self-reported reasons for seeking mental health services
Initial reports indicated approximately 500 people in Philadelphia were impacted. Subsequent detailed analysis reports that approximately 2,000 individuals were affected.
The data breach was reported to the Department of Health and Human Services on July 20, 2025. Individuals who believe their information has been used inappropriately or have questions about the possible disclosure of their protected health information can contact Equilibria's HIPAA Privacy Officer, Erica Burgoon, at 267-861-3685 x490 or 888-233-2570, or by email at Privacy@EquilibriaPCS.com.
