DisclosureLens
HackingHealthcareCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumResolved

Family of Woodstock

bd_912464bf46b14c55 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 3, 2021

Filed

Oct 18, 2021

To disclose

11 weeks

Affected · nationwide

8,59214 in this filing

Linked

6 filings

Confidence

50%
Full breach record for Family of Woodstock

Family of Woodstock, Inc. experienced an external system breach on August 3, 2021, which was also the date of discovery. The breach affected 8,592 individuals in total, including 14 residents of Maine. The compromised information included names and financial account numbers or credit/debit card numbers, along with their security codes, access codes, passwords, or PINs. Affected individuals were notified on October 18, 2021, and offered 12 months of credit monitoring and fraud assistance services through Experian.

Maine clockDiscovered Aug 3, 2021Filed with AG Oct 18, 202176d ME AG >30d11 weeks discovery → filing
occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 11 weeks / 76 days

Aug 3, 2021

Begins

Aug 3, 2021

Discovered

Oct 18, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 4d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
HHS OCROct 17 · first
Maine State AG+1d · this page

Pattern: first filing Oct 17 (NY), last Oct 22 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.