2026 WIHD — network/file access Mar–Apr; 938 individuals (OCR)
Data compromised
Varying by person: name, SSN, DL, DOB, dates of medical service, health insurance / Medicare/Medicaid numbers, provider, medical condition/diagnosis/treatment, MRN, financial account info, patient account number, full face photo, referral info
Technical writeup
Verified company notice — Westchester Institute for Human Development. Unauthorized email activity ~April 8, 2026; forensics found unauthorized file access March 23–April 14, 2026; manual review completed July 29, 2026. OCR reporting ~August 10, 2026 for 938 individuals. Limited number of people impacted; fields vary. No identity-theft evidence stated. recordsAffected 938; companyConfirmed true.
Root cause
Unauthorized access to email environment and files Mar 23–Apr 14 2026