Park West Psychology notified Massachusetts and New York residents of a privacy incident on July 6, 2026. An unauthorized actor accessed the provider's Google Workspace/Gmail account via a phishing/device-prompt attack on June 15, 2026. The actor exported Google Contacts, resulting in the exposure of client names and email addresses. No clinical records, SSNs, or financial data were compromised. The provider contained the account, reset credentials, and engaged legal counsel.