All Breaches
September 21, 2025 Verified Sensitive Record Healthcare

Wyandot Center 2025 Data Breach

The 2025 Wyandot Center data breach involved unauthorized access to portions of the Wyandot Behavioral Health Network. The U.S. Department of Health and Human Services Office for Civil Rights reported that 27,174 people were affected.

27.2 Thousand
Affected People
9
Data Types
Medium
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5 sensitive9
  • Patient IDs
  • Medical record numbers
  • Health insurance information
  • Prescription information
  • Medical information
  • Names
  • Physical addresses
  • Dates of birth
  • Social security numbers

About This Breach

Wyandot Center is a nonprofit organization providing mental-health and community-based behavioral-health services in Kansas City, Kansas.

How Did the Incident Occur?

After detecting unusual activity in its systems, the organization began an investigation with outside specialists. The review found unauthorized access to certain network areas on September 21 and 22, 2025, and determined that some information may have been viewed or acquired.

What Information Was Affected?

The affected fields varied by person and may have included names, addresses, dates of birth, Social Security numbers, patient and medical-record numbers, health-insurance information, service dates, diagnosis or condition information, provider names, prescription information, and medical histories.

Review and Response

The file review was completed on November 5, 2025. Wyandot says it secured its systems, implemented additional safeguards, notified law enforcement, and began reviewing its data-protection policies and procedures.

What Should Affected People Do?

Notice recipients should review insurance explanations of benefits, medical records, account activity, and credit reports for activity they do not recognize. The organization also offered eligible individuals credit-monitoring and identity-protection services.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information