Psychiatry of Texas Data Breach: 4,565 Residents Impacted

Psychiatry of Texas PLLC, a Houston-based psychiatric medical practice also known as PsychPlus, disclosed a data breach involving unauthorized access to its computer systems that has so far affected at least 4,565 residents in Texas.

On March 31, 2026, Psychiatry of Texas detected an anomaly on its network. The company launched an investigation and brought in cybersecurity specialists to assist with the review.

The investigation determined that the company experienced a data privacy event involving unauthorized access to its systems on March 31, 2026.

The company believes that protected health information (PHI) belonging to certain patients was acquired on that date. The breach also affected patients of healthcare providers that Psychiatry of Texas supports, meaning that individuals who were not directly treated by the practice may have had their data exposed as well.

The types of information exposed varied by individual but may have included first and last names, Social Security numbers, dates of birth, medical diagnosis or treatment information, health insurance information, electronic identification or account numbers, usernames, email addresses, a parent's premarital surname and password.

The breach was first disclosed to the Texas Attorney General on Sept. 1, 2026. Psychiatry of Texas began notifying affected individuals on Aug. 27, 2026. The company also issued a public notice about the incident on that date through a press release.

Psychiatry of Texas' response to the breach

Psychiatry of Texas is offering complimentary credit monitoring and identity protection services through HaystackID.

The company has also set up a dedicated toll-free assistance line for individuals who would like to learn whether their protected health information may have been included in the event. The number is 855-205-9558, and it is available Monday through Friday from 9 a.m. to 9 p.m. Eastern time, excluding major U.S. holidays.

The company's notification encouraged all individuals to remain vigilant for incidents of identity theft and fraud by reviewing and monitoring account statements and credit reports for suspicious activity.