Family of Woodstock

Family of Woodstock, Inc. notified the NH Attorney General of a cyber incident discovered on August 3, 2021. An unauthorized individual gained access via a brute force attack. The incident potentially impacted 8 New Hampshire residents. Affected data included PHI, SSNs, driver's license numbers, and medical history. The organization engaged forensic experts, notified law enforcement, and is providing credit monitoring.

Family of Woodstock, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-10-18. 47 Massachusetts residents were affected. The report records the breach type as electronic.

Family of Woodstock, Inc. experienced an external system breach on August 3, 2021, which was also the date of discovery. The breach affected 8,592 individuals in total, including 14 residents of Maine. The compromised information included names and financial account numbers or credit/debit card numbers, along with their security codes, access codes, passwords, or PINs. Affected individuals were notified on October 18, 2021, and offered 12 months of credit monitoring and fraud assistance services through Experian.

Family of Woodstock, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-08-03 and was reported on 2021-10-18. 6 Indiana residents were affected. 8,592 individuals affected in total.

Family of Woodstock, Inc. notified Montana residents of a cyber incident on August 3, 2021, involving unauthorized access to networks and servers. The breach potentially exposed protected health information and personal demographic data. The company engaged forensic experts, notified the FBI and DA, and is offering 12 months of credit monitoring.

Family of Woodstock (NY) reported to HHS OCR on 2021-10-17 a Hacking/IT Incident (cyber-attack) affecting 8,214 individuals. Breached ePHI was located on a Network Server and included names, addresses, phone/email, dates of birth, Social Security numbers, driver's license numbers, diagnoses, health insurance information, and other treatment information. The CE notified HHS, affected individuals, and the media, posted substitute notice on its website, and implemented additional administrative, technical, and security safeguards.