MalwareRansomwareMedusaData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
Woodfords Family Services
bd_0455a034ad41200d · schema v1 · pii pii-v1
Full breach record for Woodfords Family Services →Woodfords Family Services, a provider of clinical and behavioral services for individuals with disabilities, disclosed a ransomware incident involving the Medusa threat actor. Discovered on April 8, 2024, the breach affected 75 New Hampshire residents, exposing names, SSNs, driver's license numbers, financial account info, and medical data. Notifications were sent on March 27, 2026, offering 12 months of credit monitoring. The organization engaged forensic and data mining specialists to determine the scope.
Leak gap clock✗ Leak >180d24 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed75 affectedView incident
A leak claim by medusa about this victim predates this filing by 721 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/woodfords-family-services-20260330.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 30, 2026
- Raw hash
- 8d9a2a33d9081f68192fdfd472400cc25d2ffa0ac2a92a39252957a0511825ed
Reporting entity
- Name
- Kennedys CMK LLPnorm: kennedys cmk
Victim entity
- Name
- Woodfords Family Servicesnorm: woodfords family
- Domain
- woodfords.org
Incident
- Discovered
- Apr 8, 2024
- Materiality determined
- —
- Notification sent
- Mar 27, 2026
- Affected individuals
- 75
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Ransomware· Medusa
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1074 Data Staged
- Threat actor
- MedusaExternalFinancial
- Regulator citations
- Submitted a preliminary notice to the Department of Health and Human Services, Office for Civil RightsNotified the Department of Health and Human Services, Office for Civil Rights
Compliance
- Time to disclose
- 24 months(721 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.