Center for Life Resources 2025 Data Breach
The Center for Life Resources 2025 data breach concerns unauthorized access to the internal network of the community mental-health organization also known as Central Texas MHMR.
Exposed Data Types
3 sensitive11- Protected health information
- Medical information
- Health insurance information
- Personal information
- Names
- Physical addresses
- Social security numbers
- Driver’s license numbers
- Government-issued identification numbers
- Financial information
- Dates of birth
About This Breach
According to the organization's official notice, unusual activity was identified on 17 November 2025. The investigation found that an unknown person accessed the network on 14 and 15 November and that files were copied or may have been viewed. The organization said client care was not disrupted.
A later Texas Attorney General record, BR-0005197, reports 26,055 affected people nationwide, including 10,031 Texas residents. The Texas figure is included in the national total and is not added to it.
What information may have been involved?
The Texas record lists names, addresses, Social security numbers, dates of birth, driver's license numbers, and government-issued identification numbers such as passports or state identification cards. Financial information, medical information, and health insurance information are also among the published categories. The organization's initial notice said its data review was ongoing and detailed fields were not yet known; the later regulatory entry added these general categories. It should not be assumed that every field applied to all 26,055 people.
Organization response and safe next steps
Center for Life Resources said it secured the network, investigated with cybersecurity specialists, and reported the event to law enforcement and the U.S. Department of Health and Human Services. Notice recipients should use their individual letter as the primary source for their personal scope and review credit, financial, and health insurance records for unfamiliar accounts, transactions, or services. Unexpected messages claiming to represent the organization should be verified through an official channel. A catalogue record or match alone does not prove that someone received services from the organization or that a particular health detail was exposed.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
