HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedPIILowContained

Windward Life Care

bd_226fc7c67899eb52 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 10, 2026

To disclose

—

Affected

Not disclosed

Linked

4 records

Confidence

68%

Full breach record for Windward Life Care →

Buena Vista Management Services, LLC dba Windward Life Care (San Diego, CA) notified affected individuals of unauthorized access to its network environment on or about December 8, 2025. An investigation revealed that certain personal information may have been viewed or copied without authorization. Data review concluded April 6, 2026. Affected individuals were offered 12 months of credit monitoring through Cyberscout.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Dec 8, 2025

Begins

Apr 10, 2026

Filed

This filing is one of 4 records about the same incident.View merged incident

A leak claim by sinobi about this victim was first seen 95 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesinobibd_42436b00c5e391a82026-01-05 · +95dVerified

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_89849c3fefd2f1842026-04-10Verified
Vermont State AGbd_a40fdd5f762fb4f12026-04-10Verified

Name: Windward Life Care
norm: windward life care
Domain: windwardlifecare.com

Name: Windward Life Care
norm: windward life care
Domain: windwardlifecare.com
Also named: BUENA VISTA MANAGEMENT SERVICES, LLCdba oflegal entity
Windward Life Caredba oftrade name
Industry: Healthcarellm

Discovered: —
Breach occurred: Dec 8, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data Staged
Threat actor: External

During the incident: Retained legal counsel to investigate the unusual activity
Retained third-party forensic specialists to investigate the unusual activity
Began a comprehensive review of the data set to determine what sensitive and/or personal information was impacted
Notifying potentially impacted individuals
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for twelve months
Providing proactive fraud assistance through Cyberscout, a TransUnion company
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGApr 10 · first

Vermont State AGApr 10 · first

California State AGApr 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-621585
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2026
Raw hash: 6ba2a3086799a22f727c70a5735b8d57642c76418c7be283c186de0cd2f48d64

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityWindward Life Care

Victim entityWindward Life Care

IncidentUnauthorized Access

Stated responseRetained legal counsel to investigate the unusual activity

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov