1. News
  2. Alerts
  3. NY · Data breach
AlertNY · Data breach2 min read

Hacked software vendor exposes data of NY counseling patients

Hackers got into a records software vendor, and Social Security numbers and health details of patients at two New York counseling practices may have been taken.

By the Dashline deskSource: HIPAA Journal
Hacked software vendor exposes data of NY counseling patients
Photo: Tdorante10, CC BY-SA 4.0
Act this week
What happenedHackers broke into Accumedic Computer Systems, a records software vendor, and may have taken patient data from two New York counseling practices.
Who is affectedPatients of Hispanic Counseling Center on Long Island and Brooklyn Counseling Services (BCS Group), mainly in the New York area.
What to do
  1. 1Open any letter from either practice and read it fully.
  2. 2Sign up for the free credit monitoring if it is offered to you.
  3. 3Consider freezing your credit with the three major credit bureaus.
  4. 4Watch insurance statements and bank accounts for charges or care you do not recognize.

Two New York counseling practices are warning patients that their Social Security numbers and health details may have been stolen. The theft did not happen at the clinics themselves. It happened at Accumedic Computer Systems, a company that makes electronic medical records software for behavioral health providers.

What happened

Accumedic told Hispanic Counseling Center that it spotted suspicious activity on its network on June 8, 2026. Outside experts found that an unauthorized person first got in on April 8, 2026. The person may have taken customer information between June 4 and June 8. On September 1, Accumedic confirmed that patient health information was exposed and may have been taken.

Who it affects

Hispanic Counseling Center on Long Island runs a mental health clinic and a substance use disorder clinic, and offers bilingual counseling. Brooklyn Counseling Services, also called BCS Group or BCS Counselling Group, has also told patients about a similar incident at one of its records vendors.

The BCS letter does not name the vendor or say when the incident happened. The timing of the letters suggests it is the same vendor, Accumedic, but that is an inference, not a confirmed fact. The number of people affected has not been made public. One Massachusetts resident and two Vermont residents were affected, and most others are likely in Brooklyn.

What was exposed

For Hispanic Counseling Center patients, the data includes names, dates of birth, Social Security numbers, medical information and health insurance information. For BCS patients, it includes names, email addresses, phone numbers, dates of birth, Social Security numbers and health records. A Social Security number is the piece that matters most. With it, a criminal can try to open accounts or file claims in someone else's name.

Who can relax

If you have never been a patient at either practice, this notice is not about you. It is not yet known whether other practices that use the same vendor are affected.

What to do and what comes next

Hispanic Counseling Center began mailing letters on October 30, 2026, and says free credit monitoring is available. The steps in the alert box above explain how to respond. Accumedic says it has added technical safeguards. Watch for more detail, including how many people were affected, as the practices and state officials share it.

The takeaway

If you saw either practice, read the letter, take the free credit monitoring, and keep a close eye on your credit and insurance statements.

More articles

You should really read these.

Next step

Let’s talk