BCS Counseling Group Data Breach Exposed PHI and PII

Brooklyn Counseling Services, a mental health care provider operating as BCS Counseling Group, disclosed a data breach that originated with one of its electronic medical records (EMR) vendors.

The breach was limited to the third-party vendor's systems. Personal information that the company had provided to the vendor may have been involved.

The affected files contained both personally identifiable information (PII) and protected health information (PHI). The specific types of data exposed included names, Social Security numbers, dates of birth, email addresses, phone numbers and health records.

The breach was disclosed to the attorneys general offices of Massachusetts and Vermont starting on Oct. 24, 2026. Brooklyn Counseling Services is notifying affected individuals by written notice.

Brooklyn Counseling Services' response to the breach

Brooklyn Counseling Services is offering affected individuals 24 months of free credit monitoring and identity restoration services through Epiq.

Individuals who wish to enroll can visit the Epiq Monitoring Solutions website and use the activation code provided in their notification letter. Enrollment must be completed by the deadline listed in each individual's notification.

For help with the Epiq enrollment process, affected individuals can contact Epiq directly at 866-675-2006, Monday through Friday from 9:00 a.m. to 5:30 p.m. Eastern Time.

For other questions about the breach, the company has set up a dedicated toll-free assistance line at 888-752-8330, available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time.