MalwareHealthcareHealthcareRansomwareCapture Stored DataMedusaRansom DemandedData ExfiltratedData EncryptedActor NamedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICHighContained
Woodfords Family Services
bd_1422de03d215c192 · schema v1 · pii pii-v1
Full breach record for Woodfords Family Services →On April 8, 2024, Woodfords Family Services (Westbrook, ME) suffered a ransomware attack by the Medusa group. Data staging and exfiltration-associated activity was observed. Due to extensive data mining, scope was not confirmed until January 29, 2026. Affected data: names, SSNs, driver's license numbers, financial accounts, medical/treatment info, and health insurance info. 7,701 Maine residents affected.
Leak gap clock✗ Leak >180d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
A leak claim by medusa about this victim predates this filing by 718 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/857ab65e-ee4e-4de5-a021-a48b2ef72c3e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 27, 2026
- Raw hash
- 7b9f065806245ed3303fb910192252e439a0f7331e60d2461acd04990a192223
Reporting entity
- Name
- Woodfords Family Servicesnorm: woodfords family
- Domain
- woodfords.org
- Industry
- Healthcare
Victim entity
- Name
- Woodfords Family Servicesnorm: woodfords family
- Domain
- woodfords.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jan 29, 2026
- Materiality determined
- Jan 29, 2026
- Notification sent
- Mar 27, 2026
- Affected individuals
- 7,701
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Ransomware· Medusa
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- MedusaExternalFinancial
- Regulator citations
- Preliminary notice submitted to HHS Office for Civil Rights on June 3, 2024Notified three major credit reporting bureaus: Experian, Equifax, TransUnion
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 29, 2026→ Filed with AG: Mar 27, 202657d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.