Windrose Health Network, Inc.
bd_a3486148f265070f · schema v1 · pii pii-v2
Full breach record for Windrose Health Network, Inc. →2 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Storm on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
WindRose Health Network (WHN) is dedicated to providing affordable, quality healthcare services, focusing on family medicine, pediatrics, prenatal care, and behavioral health. The organization aims to improve the health of underserved communities by offering personalized and innovative healthcare solutions, including financial assistance programs. WHN operates multiple health centers and emphasizes compassionate care and preventative services. Their mission is to ensure that everyone, particularly the poor and vulnerable, has access to essential medical care.. The company headquarters is located in 163 Butner Drive, Hope, IN 47246, United States. 51-200 Employees
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Aug 16, 2026
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- HHS OCRbd_4ca8c68bceee7c112026-09-16 · +31dCandidate
- Indiana State AGbd_f39004c34b48a8e52026-09-16 · +31dVerified
- Indiana State AGbd_82222ed65c7f060f2026-01-27 · +201dVerified by operator
- Indiana State AGbd_9e1a75e7933845af2026-01-27 · +201dVerified by operator
Show 1 more filing ↓Show fewer ↑up to 201d gap
- HHS OCRbd_bdf5ac19295fb0722026-01-27 · +201dVerified
Filing propagation · 5 filings
View merged incident ↗Pattern: first filing Jan 27 (IN), last Sep 16 (IN) — a 232-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.