CSIDB logo
Incident

Wichita Family Dental

Incident posture

Attack window
May 2026
Location
United States of America
Status
Resolved
CIA posture
Available to members
Updated
2026-11-01 02:13

Linked entities

Victim
Wichita Family Dental
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Undetermined
Discovered
May 2026
Disclosed
Oct 2026
Resolved
Jul 2026

Summary

Wichita Family Dental, a dental practice with locations in Wichita and Derby, Kansas, identified unauthorized access to an employee email account containing the personal and protected health information of 1,273 individuals. The compromised data included names, addresses, dates of birth, Social Security numbers, driver’s license numbers or state IDs, taxpayer ID numbers, payment card information, financial account information, health insurance information, and dental records. The account was secured and the investigation was completed, after which steps were taken to improve email security.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

0 techniques

Description

Wichita Family Dental, a dental practice with locations in Wichita and Derby, Kansas, identified unauthorized access to an employee's email account on or around May 4, 2026. The account was secured following the identification of the intrusion. An investigation and review of the account were completed on July 6, 2026. The review determined that the account contained the personal and protected health information of 1,273 individuals. The data involved included names, addresses, dates of birth, Social Security numbers, driver's license numbers or state ID numbers, taxpayer ID numbers, payment card information, financial account information, health insurance information, and dental records. The practice operates in Kansas and serves patients across its two locations.

Steps have been taken since the incident to improve email security at the practice. The breach at Wichita Family Dental was disclosed as part of a group of healthcare data breach announcements that also included Paylogix, the Kenaitze Indian Tribe, and the Center for Bone and Joint Surgery of the Palm Beaches. The investigation concluded on July 6, 2026, after determining the scope of the information stored in the compromised mailbox. The email account had been secured following the initial identification of unauthorized access.

Sources

Sources available to members: 1 source.

CSIDB