Well Child Data Breach Exposes Social Security Numbers

Well Child Inc., a Memphis, Tennessee-based company that provides school-based preventive health services for children and adolescents, disclosed a data breach that affected approximately 500 individuals in the United States.

The breach was disclosed to the U.S. Department of Health and Human Services on Aug. 14, 2026. Well Child posted a notice of the cybersecurity incident on its website.

On June 1, 2026, Well Child learned of a cybersecurity incident affecting its computer network. The company activated its incident response procedures and all affected servers were taken offline. Well Child also engaged external and independent cybersecurity experts to assist with the investigation into the incident.

Five days after discovering the breach, on June 6, the company determined that certain files had been taken from a temporary file storage server that was part of its network. As a result, Well Child began a comprehensive review to determine what information was involved and to identify the individuals whose data may have been affected.

The company's investigation found that the files involved included certain Vision Screening Report Files, Vision Screening Data Files and other documents stored on the affected server. The breach specifically involved electronic health information belonging to Tennessee school-aged students.

The types of information exposed included names, dates of birth and Social Security numbers, medical record numbers, provider names, diagnoses, assessment or testing results, billing or procedure codes and treatment dates.

Well Child's response to the breach

The company set up a dedicated phone line for affected individuals seeking more information about the breach and what steps they can take. The line is available Monday through Friday from 9:00 a.m. to 5:00 p.m., and the specific phone number can be found on the company's online notice.

In its notice, Well Child outlined several protective measures for affected individuals to consider, including contacting credit bureaus to place fraud alerts or credit freezes. However, the company did not indicate that it is offering free credit monitoring or identity protection services to those affected by the breach.