Family Counseling Services of the Finger Lakes (FCSFL) experienced a cybersecurity incident. On or about Feb. 4, 2025 the organization discovered that a number of employee email accounts were accessed by a cybercriminal between Jan. 14, 2025 and Feb. 4, 2025.
A review took place and on June 30, 2025, it was determined that both personal and protected health information were accessed and or acquired in the data breach. The exposed data belonged to individuals, children, and families who have used FCSFL’s services.
Compromised information includes names, dates of birth, Social Security numbers, driver's license numbers, bank account numbers, medical information and health insurance information. The total number of impacted individuals has not been released.
Family Counseling Services of the Finger Lakes notified impacted individuals by mail on Aug. 25, 2025 and published a Notice of Data Security Incident on its website. The data breach was also disclosed to the Vermont Attorney General's office on Aug. 27, 2025.
In addition to required state and federal disclosures, the organization is offering free single-bureau credit monitoring services to all impacted individuals.
If you receive a notice from Family Counseling Services of the Finger Lakes about this breach, you may want to:
More information about their services and programs can be found on the Family Counseling Services of the Finger Lakes website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.