Water For People
bd_f6127a1f201b0470 · schema v1 · pii pii-v1
Full breach record for Water For People →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Data Breach Notification. Water For People: Around December 15, 2023, Water For People detected unauthorized activity on its IT systems. The organization immediately secured its systems and engaged a specialized computer forensics firm to investigate. After a thorough investigation, Water For People confirmed that a limited amount of personal information may have been accessed as part of this incident. Linked ransomware group: medusa.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Dec 15, 2023
Press report
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitemedusabd_b8955f0cd698c83e2023-12-15Verified by operator
Regulatory filings (6) · sorted by filing gap
- Vermont State AGbd_1f8df32e54c704c82024-09-05 · +265dVerified
- Montana State AGbd_2f77e69a7542f2f82024-09-05 · +265dCandidate
- New Hampshire State AGbd_328e5b2385a6a76d2024-09-05 · +265dVerified
- Indiana State AGbd_8937325be81321412024-09-05 · +265dVerified
Show 2 more filings ↓Show fewer ↑up to 266d gap
- Washington State AGbd_fcdf66f98c82eef32024-09-05 · +265dVerified
- Massachusetts State AGbd_d16592a54ea711c12024-09-06 · +266dVerified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
medusa
According to ransomware.live, Medusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.