HackingData MishandlingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICHEALTH_BASICLowContained
Women's Wellness of Southern Delaware
bd_d3c2ff85948313f9 · schema v1 · pii pii-v1
Full breach record for Women's Wellness of Southern Delaware →Women's Wellness of Southern Delaware notified patients of a data security incident on June 26, 2026. On April 28, 2026, the organization learned that a former aesthetics service provider retained patient contact and clinical information after the engagement ended. Affected data includes names, contact details, birthdates, and aesthetic/clinical records. The organization is working to ensure the data is returned or destroyed and has enhanced security measures.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3cbbf8be0051e0d9New Hampshire State AGfiled 2026-06-29(3d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/06/WWSD-Sample-Notification-Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2026
- Raw hash
- 12966f322b0d6972378fafd62d85d8b1fee991342e57dc96b90f8d64a9793a7e
Reporting entity
- Name
- Women's Wellness of Southern Delawarenorm: women s wellness of southern delaware
- Domain
- womenswellness-sd.com
Victim entity
- Name
- Women's Wellness of Southern Delawarenorm: women s wellness of southern delaware
- Domain
- womenswellness-sd.com
Incident
- Discovered
- Apr 28, 2026
- Materiality determined
- —
- Notification sent
- Jun 26, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Third party
- via former provider who rendered aesthetics services
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.