Cybersecurity Breach at Ohio Behavioral Health Provider Exposes Data of 83,000 Individuals On February 10, 2026, The Counseling Center of Wayne and Holmes Counties an Ohio-based healthcare provider specializing in behavioral and emotional health services disclosed a cybersecurity incident that compromised the personal and medical data of over 83,000 individuals. The breach involved unauthorized access to the organization’s network, potentially exposing sensitive information, including: - Personally Identifiable Information (PII): Names, Social Security numbers, dates of birth, and driver’s license or state ID numbers. - Protected Health Information (PHI): Medical conditions, health insurance details, treatment provider names, medical record numbers, treatment costs, and diagnosis or treatment records. The incident is under investigation by Lynch Carpenter, LLP, a national class action law firm, which is reviewing potential legal claims on behalf of affected individuals. The Counseling Center has not yet provided further details on the breach’s origin, timeline, or remediation efforts. This breach highlights ongoing risks to healthcare data, where sensitive patient information remains a prime target for cyber threats. Affected individuals may face heightened exposure to identity theft, fraud, and medical privacy violations. The full scope of the incident’s impact is still being assessed.

Counseling Center of Wayne and Holmes Counties Suffers Major Data Breach Affecting 83,354 Individuals A significant data breach at the Counseling Center of Wayne and Holmes Counties, a nonprofit mental health provider based in Wooster, Ohio, has exposed sensitive personal and medical information of 83,354 individuals across the U.S. The incident, discovered on March 3, 2025, stemmed from unauthorized access to one of the center’s servers the prior day. The breach was first detected after a third-party service provider reported system disruptions. An internal investigation revealed that an unauthorized entity accessed and exfiltrated data on March 2–3, 2025. The center responded by containing the breach, resetting credentials, and engaging cybersecurity experts to assess the scope of the compromise. After a nine-month investigation, the center concluded its analysis on December 9, 2025, and began notifying affected individuals via written notices on February 9, 2026. The Maine Attorney General’s office was also notified, as two state residents were impacted. Exposed data includes: - Names, dates of birth, and Social Security numbers - Driver’s license or state ID numbers - Health insurance details and medical conditions - Treatment provider names, medical record numbers, and diagnosis/treatment information - Cost details related to medical care The Counseling Center, founded in 1953, provides mental health services including counseling, crisis intervention, and telehealth to children, adults, and families in Wayne and Holmes counties. The breach has prompted legal action, with law firm Shamis & Gentile P.A. investigating potential compensation claims for affected individuals.