Counseling Center of Wayne & Holmes Counties 2025 Data Breach
The Counseling Center of Wayne & Holmes Counties 2025 data breach concerns unauthorized access to a server belonging to the Ohio mental-health organization.
Exposed Data Types
6 sensitive10- Health insurance information
- Medical condition information
- Treatment provider names
- Medical record numbers
- Treatment cost information
- Diagnosis or treatment information
- Names
- Dates of birth
- Social security numbers
- Driver's license or state ID numbers
About This Breach
According to the organization's official notice, a service provider alerted it to suspicious activity on 3 March 2025. A forensic investigation found that an unauthorized person likely accessed one server on 2 March and took information from the systems on 3 March.
The U.S. Department of Health and Human Services Office for Civil Rights (HHS/OCR) lists the event as a hacking or IT incident involving a network server and reports 83,354 affected people. This is a person count, not a count of servers, files, or data rows.
What information may have been involved?
The official notice lists names, dates of birth, Social security numbers, driver's license or state identification numbers, health insurance information, medical condition information, treatment provider names, medical record numbers, treatment costs, and diagnosis or treatment information. The organization explicitly says the combination varied by person; it should not be assumed that every category applied to all 83,354 people.
Organization response and safe next steps
The Counseling Center said it isolated systems it believed were affected, reset account credentials, worked with external data-security specialists, and completed its data review on 9 December 2025. At the time of the official notice, there was no evidence that personal information had been used for identity theft or fraud. Notice recipients should rely on their individual letter for their data scope and review credit reports and health insurance statements for unfamiliar accounts, claims, or services. A catalogue record or match alone does not prove that someone received mental-health services from the organization or that a particular health detail was exposed.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
