In June, Equilibria Mental Health Services suffered a phishing attack that exposed sensitive data of at least 500 individuals in Philadelphia. The breach compromised mailing addresses, phone numbers, health insurance details, and self-reported mental health reasons—highly confidential information. The attack originated from a compromised email address, tricking patients into opening malicious documents and disclosing login credentials. Authorities are investigating, while Equilibria is reinforcing cybersecurity measures, including employee training and third-party threat response testing. Patients who interacted with the phishing email were advised to change passwords immediately to mitigate further risks. The incident highlights vulnerabilities in handling protected health information (PHI) and the critical need for robust anti-phishing defenses in healthcare sectors.