Youth Home Data Breach
The 2026 Youth Home data breach is a confirmed incident in which an employee email inbox was accessed without authorization on May 14, 2026, exposing personal and health information held in the mailbox. Youth Home has not publicly disclosed the total number of people affected.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
3 sensitive7- Medical information
- Diagnoses
- Prescription information
- Names
- Physical addresses
- Dates of birth
- Social security numbers
About This Breach
Youth Home is a nonprofit organization based in Little Rock, Arkansas that provides psychiatric and behavioral health services to young people and families. The incident was tied to a single employee account in the organization's email environment.
How Did the Incident Occur?
According to the official notice, the mailbox was accessed without authorization on May 14; Youth Home discovered the incident on May 15 and terminated access. External cybersecurity and privacy specialists participated in the review. The organization says it found no evidence that the unauthorized individual used the information that was accessed.
What Information Was Affected?
The affected fields vary by person. The disclosed scope includes first and last names, addresses, dates of birth, Social Security numbers, medical information, diagnoses, medications, and admission and discharge dates. The notice does not say that every category applied to every person.
How Did Youth Home Respond?
Youth Home says it directly notified people whose information may have been involved and offered one year of complimentary credit monitoring to certain individuals. The organization also began a forensic review of relevant systems, strengthened safeguards, and reviewed its HIPAA privacy and security procedures.
What Should Affected People Do?
Notice recipients should rely on their individual letters for their specific data scope. Credit reports, financial accounts, health-insurance statements, and medical bills can be monitored for unfamiliar activity. If a Social Security number was involved, free credit-freeze and fraud-alert options may be considered, and unexpected messages should be verified through Youth Home's official channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
