Chicago Psychoanalytic Institute Breach Exposes Sensitive Records

The Chicago Psychoanalytic Institute, a specialized mental health and educational organization, experienced a data security incident on November 30, 2025. This breach was formally reported to the Indiana Attorney General on September 29, 2026, indicating that sensitive personal information entrusted to the Institute was compromised.

The exposed data categories are particularly sensitive given the nature of the Institute's services. They include Full Name, Date of Birth, Social Security Number, Home Address, Health Insurance Policy Information, Diagnosis and Treatment Information, Psychotherapy and Clinical Notes, and Billing and Financial Records. The compromise of such deeply private details can have lasting implications for those affected.

Unlike breaches involving financial cards that can simply be canceled, the exposure of mental health records, including Diagnosis and Treatment Information and Psychotherapy and Clinical Notes, cannot be undone. This type of data puts victims at unique risk for targeted medical identity theft, privacy violations, and significant emotional distress due to the potential revelation of highly personal therapeutic details.

As an organization handling protected health information, the Chicago Psychoanalytic Institute had clear legal obligations under federal and state law, including HIPAA, to safeguard this data. A data breach of this scope suggests that mandatory security protocols and oversight may have been insufficient, potentially failing to meet the rigorous standards required to protect patient privacy.

If you received a data breach notification letter from the Chicago Psychoanalytic Institute, it indicates that your sensitive personal information was directly involved. This notification provides you with legal standing to explore potential claims for the increased risk and harm you now face. You do not need to prove immediate financial loss to consider your legal options.

Our dedicated legal team focuses on holding organizations accountable for failing to protect personal data. We offer free case reviews to help you understand your rights and determine the best path forward, operating on a contingency-fee basis so you pay nothing upfront.