WIHD Data Breach Compromises Protected Health and Personal Information

Westchester Institute for Human Development Inc. (WIHD), a nonprofit organization based in Valhalla, New York, disclosed a data breach that affected 938 individuals in the United States.

WIHD provides health, clinical, dental, behavioral and social services for people with intellectual and developmental disabilities as well as vulnerable children across Westchester and the Lower Hudson Valley. The organization's services include primary care, specialty medical care, dental care, speech and hearing services, assistive technology, behavioral health, service coordination and early intervention.

The breach was reported to the U.S. Department of Health and Human Services on Aug. 10, 2026. WIHD posted a notice of the security incident on its website.

Between March 23, 2026, and April 14, 2026, an unauthorized actor accessed the organization's network.

The organization conducted a review of the affected files which concluded on July 29, 2026, finding that the breach had exposed a wide range of both personally identifiable information (PII) and protected health information (PHI).

The PII compromised in the incident included names, dates of birth, Social Security numbers, driver's license numbers, contact information, financial account information and full face photos.

The PHI involved included medical conditions, medical record numbers, patient account numbers, prescription information, provider information, dates of medical service, health insurance policy numbers and Medicaid or Medicare numbers.

Westchester Institute for Human Development's response to the breach

Westchester Institute for Human Development has sent notification letters to inform those affected about the breach and the steps they can take to protect themselves.

Affected individuals should not delay in taking protective steps, even if they have not yet received a formal notification letter. Individuals with questions about the breach can find additional details on the organization's website.