HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Windward Life Care
bd_a40fdd5f762fb4f1 · schema v1 · pii pii-v1
Full breach record for Windward Life Care →Buena Vista Management Services, LLC dba Windward Life Care notified consumers of a data breach starting December 8, 2025. Unauthorized individuals may have viewed or copied personal information, including names and government IDs. The company retained forensic specialists and offers 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by sinobi about this victim predates this filing by 94 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_42436b00c5e391a8Leak Sitesinobifiled 2026-01-05(95d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_226fc7c67899eb52California State AGfiled 2026-04-10Verified
- bd_a9d92ba58da5ad35Maine State AGfiled 2026-04-10Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-04-10-buena-vista-management-services-llc-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2026
- Raw hash
- 170fa4b771498a96c580c429e3df5f0e76dbbe418e0f1e17eb42cef319c5192f
Reporting entity
- Name
- Windward Life Carenorm: windward life care
- Domain
- windwardlifecare.com
Victim entity
- Name
- Windward Life Carenorm: windward life care
- Domain
- windwardlifecare.com
Incident
- Discovered
- Dec 8, 2025
- Materiality determined
- —
- Notification sent
- Apr 10, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 18 weeks(123 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.