Wichita Family Dental
Incident posture
Linked entities
- Victim
- Wichita Family Dental
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
Wichita Family Dental, a dental practice with locations in Wichita and Derby, Kansas, identified unauthorized access to an employee email account containing the personal and protected health information of 1,273 individuals. The compromised data included names, addresses, dates of birth, Social Security numbers, driver’s license numbers or state IDs, taxpayer ID numbers, payment card information, financial account information, health insurance information, and dental records. The account was secured and the investigation was completed, after which steps were taken to improve email security.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
Wichita Family Dental, a dental practice with locations in Wichita and Derby, Kansas, identified unauthorized access to an employee's email account on or around May 4, 2026. The account was secured following the identification of the intrusion. An investigation and review of the account were completed on July 6, 2026. The review determined that the account contained the personal and protected health information of 1,273 individuals. The data involved included names, addresses, dates of birth, Social Security numbers, driver's license numbers or state ID numbers, taxpayer ID numbers, payment card information, financial account information, health insurance information, and dental records. The practice operates in Kansas and serves patients across its two locations.
Steps have been taken since the incident to improve email security at the practice. The breach at Wichita Family Dental was disclosed as part of a group of healthcare data breach announcements that also included Paylogix, the Kenaitze Indian Tribe, and the Center for Bone and Joint Surgery of the Palm Beaches. The investigation concluded on July 6, 2026, after determining the scope of the information stored in the compromised mailbox. The email account had been secured following the initial identification of unauthorized access.
Sources
Sources available to members: 1 source.