Windward Life Care
bd_42436b00c5e391a8 · schema v1 · pii pii-v1
Full breach record for Windward Life Care →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Sinobi on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Windward Life Care offers premier home care, aging life care management, and home health care services specifically designed for older and disabled adults in San Diego, CA. Their services include personalized Aging Life Care Management, companionship, transportation, personal care, and skilled nursing services. With over 20 years of experience, they focus on enhancing the quality of life for their clients by providing exceptional support and navigating the complexities of health care. Windward Life Care aims to foster independence and safety for their clients within the comfort of their own homes.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jan 5, 2026
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- California State AGbd_226fc7c67899eb522026-04-10 · +95dVerified
- New Hampshire State AGbd_89849c3fefd2f1842026-04-10 · +95dVerified
- Vermont State AGbd_a40fdd5f762fb4f12026-04-10 · +95dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
sinobi
According to ransomware.live, Sinobi is a private vetted-affiliate RaaS group that emerged in mid-2025, believed to be a rebrand of the Lynx/INC ransomware lineage, claiming 176 victims by end of 2025 through double-extortion attacks primarily against mid-market US organizations via compromised SonicWall VPN credentials.