Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Park West Psychology
bd_8d47f6c48d273e98 · schema v1 · pii pii-v1
Full breach record for Park West Psychology →Park West Psychology notified Massachusetts and New York residents of a privacy incident on July 6, 2026. An unauthorized actor accessed the provider's Google Workspace/Gmail account via a phishing/device-prompt attack on June 15, 2026. The actor exported Google Contacts, resulting in the exposure of client names and email addresses. No clinical records, SSNs, or financial data were compromised. The provider contained the account, reset credentials, and engaged legal counsel.
Massachusetts clock✓ MA AG ≤30d16 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1107-park-west-psychology/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- e22f7a1240324c2b72af3db6ba4377ba411840a622ce91acc77a787402701dba
Reporting entity
- Name
- Park West Psychologynorm: park west psychology
- Domain
- parkwestpsychology.com
Victim entity
- Name
- Park West Psychologynorm: park west psychology
- Domain
- parkwestpsychology.com
Incident
- Discovered
- Jun 15, 2026
- Materiality determined
- —
- Notification sent
- Jul 6, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 days(16 days from discovery to filing)
- Compliance flags
- MA AG ≤30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.