Wyandot Center, a nonprofit mental health care provider based in Kansas City, Kan., recently experienced a significant data breach that may have affected individuals who have used its services. The incident involved unauthorized access to portions of the organization’s network over a two-day period, potentially exposing sensitive personally identifiable information (PII) and personal health information (PHI). Details of the data breach On Nov. 19, 2025, Wyandot Center disclosed that it had discovered unusual activity within its systems. After engaging third-party cybersecurity specialists to investigate, it was determined that unauthorized access occurred between Sept. 21 and Sept. 22, 2025. The breach may have resulted in the unauthorized access or acquisition of information belonging to individuals who received services from the organization. Compromised data may include first and last name, address, date of birth, Social Security number, patient ID, medical record number, health insurance information, service date, diagnosis or condition information, provider name, prescription information and medical history information. Wyandot Center completed a thorough review of the affected data by Nov. 5, 2025, and began notifying individuals whose information may have been involved. The organization has not specified the exact number of people affected, but the range of data exposed indicates the breach could have serious consequences for those impacted. The company posted a n