Almeida Law Group is investigating a data breach at Central Kansas Mental Health Center. The breach was discovered on September 26th, 2025. If you were affected, contact Almeida Law Group.
About Central Kansas Mental Health Center
Central Kansas Mental Health Center (CKMHC) is a nonprofit community mental health organization founded in 1964 and based in Salina, Kansas. It serves as the designated local Mental Health Authority for Dickinson, Ellsworth, Lincoln, Ottawa, and Saline counties, providing behavioral health services including case management, individual and family therapy, peer support, and youth services. Because CKMHC is a behavioral health provider, it maintains records containing sensitive personal, financial, and medical information about the individuals it serves.
What Happened?
Central Kansas Mental Health Center was listed in a Texas Attorney General data security breach report published on June 25th, 2026. According to that report and supplemental research, CKMHC discovered suspicious network activity on September 26th, 2025, and immediately took its network offline and engaged external cybersecurity experts. The investigation determined that an unauthorized third party had gained access to the network and likely exfiltrated files. A total of 37,610 individuals were affected. The compromised information includes names, addresses, Social Security numbers, driver’s license numbers, government-issued ID numbers, financial account information, medical information, health insurance information, and dates of birth. CKMHC first announced the breach on its website on November 19th, 2025. Affected individuals are being notified by U.S. Mail, and CKMHC is offering complimentary credit monitoring and identity theft protection services through a dedicated call center. CKMHC has stated it found no evidence of misuse of the exposed data. No ransomware group or specific threat actor has been publicly attributed to this incident.
As of May 2026, the law firm Shamis & Gentile P.A. is investigating the breach for a potential class action lawsuit, though no complaint has been filed as of the time of this writing.
Key Facts at a Glance
- Company or Organization: Central Kansas Mental Health Center
- Industry: Healthcare – Behavioral/Mental Health Provider (Nonprofit Community Mental Health Center)
- Location: Salina, Kansas
- Incident type: Unauthorized third-party network access with likely data exfiltration
- Date breach discovered: September 26th, 2025
- Date of consumer notification: November 19th, 2025 (website notice); U.S. Mail notifications ongoing
- Total persons affected: 37,610
- Identity theft protection offered: Yes, complimentary credit monitoring and identity theft protection services
- Prior breach: None identified
- Litigation status: Shamis & Gentile P.A. investigating for potential class action; no complaint filed as of May 2026
- Source: Texas Attorney General data security breach report (BR-0005134) – https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005134; https://www.claimdepot.com/data-breach/central-kansas-mental-health-center-2026; https://www.claimdepot.com/investigations/central-kansas-mental-health-center-data-breach-2026
What Should You Do?
If you received a notification letter from Central Kansas Mental Health Center, enroll in the complimentary credit monitoring and identity theft protection services offered before any stated deadline and keep a copy of your enrollment confirmation. Place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for anyone to open new accounts in your name. Review your credit reports for unfamiliar accounts or inquiries at AnnualCreditReport.com, where you can access free reports from each bureau. Because medical and health insurance information was involved, carefully review any Explanation of Benefits statements from your insurer and check your medical records for services you do not recognize. If you suspect fraud or identity theft, report it at IdentityTheft.gov, where you can also create a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
