Perseus House, Inc., a Pennsylvania nonprofit mental health care organization, experienced a data breach when an unauthorized actor gained access to certain systems and copied files on or around November 29, 2025. The company reported the incident to the U.S. Department of Health and Human Services on February 20, 2026.
The breach potentially compromised data for 969 individuals, including names, home addresses, telephone numbers, dates of birth, Social Security numbers, personal banking or financial account information, medical information (diagnoses, treatments, providers), and health insurance information (group or policy numbers). It remains unclear if individualized notification letters were sent to all affected persons.
Details surrounding this incident, including the full scope of data impact and any further legal or regulatory actions, may emerge over time. Affected individuals were advised to monitor their account statements and credit reports.