Wonderland Child and Family Services data breach
Wonderland Child and Family Services filed a data breach report on April 8, 2026, with Washington authorities. This incident exposed sensitive personal and health information, creating significant risks for affected children and families, including potential identity theft and privacy violations.
Docket sheet
- Company
- Wonderland Child and Family Services
- Venue
- Washington Attorney General
- Filed
- April 8, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Washington Attorney GeneralApril 8, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Parent or Guardian Information
- Billing and Financial Information
Clerk's notes
Wonderland Child and Family Services, a Washington-based provider of pediatric therapy and family support, formally reported a data security incident on April 8, 2026. This report, filed with the state's Attorney General, is currently under monitoring, indicating an active review of the breach's scope and impact.
The reported exposure includes a comprehensive array of sensitive data types crucial to patient and family privacy. The information compromised covers Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Parent or Guardian Information, and Billing and Financial Information.
The exposure of such detailed records creates a multi-layered threat for affected individuals, particularly vulnerable children and their parents. Compromised Social Security Numbers and Dates of Birth heighten the risk of financial fraud and identity theft, while the loss of Medical Record Numbers and Diagnosis and Treatment Information can lead to medical identity theft and unauthorized access to health services.
As a healthcare and social services provider, Wonderland Child and Family Services is entrusted with safeguarding this highly sensitive information under strict regulations, including the Health Insurance Portability and Accountability Act (HIPAA) and Washington state laws. These regulations require robust security measures to prevent unauthorized access and data compromise.
If you have received a notification letter from Wonderland Child and Family Services, it confirms that your or your child's confidential data was part of this security incident. This notice establishes your legal standing to understand your options, even if you haven't yet experienced direct harm. Our firm is evaluating claims related to this breach.
Considering the types of data exposed, affected individuals may face increased and future risks that warrant legal review. Understanding these potential impacts and your rights is an important next step. We invite you to request a free case review.
If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.
Other Washington docket entries
- Hands On Children’s MuseumWashington AGNovember 5, 2026Monitoring
- DreamHost, LLCWashington AGNovember 4, 2026Monitoring
- Frontline EducationWashington AGOctober 27, 2026Monitoring
- JM Bullion, Inc. (Silver.com, ProvidentMetals.com)Washington AGOctober 13, 2026Monitoring
- DriveWealth, LLCWashington AGOctober 13, 2026Monitoring
- iRhythm Technologies Inc.Washington AGOctober 6, 2026Monitoring
- Poppins Payroll CompanyWashington AGSeptember 29, 2026Monitoring
- Ridgeway Pharmacy LtdWashington AGSeptember 21, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.