Woodfords Family Services

Woodfords Family Services, a Maine healthcare provider, disclosed an amended ransomware breach caused by the Medusa actor group. Unauthorized access occurred on April 8, 2024. The incident affected 41,984 individuals, including 7,701 Maine residents. Compromised data included names, SSNs, driver's licenses, financial account info, and PHI. Notices were sent on March 27, 2026, offering 12 months of credit monitoring.

Woodfords Family Services, a provider of clinical and behavioral services for individuals with disabilities, experienced a ransomware attack attributed to the Medusa threat actor group on April 8, 2024. The incident involved unauthorized access, data staging, and exfiltration of personal information for 75 New Hampshire residents, including names, SSNs, driver's license numbers, financial account info, and medical records. The company discovered the incident on the same day it occurred. Notifications were sent to affected individuals on March 27, 2026, after an extensive data review process concluded in January 2026. The company is offering 12 months of credit monitoring and has engaged forensic specialists and law enforcement.

Woodfords Family Services notified Vermont consumers of a data security incident discovered on April 8, 2024. Unauthorized access resulted in the exposure of names. Three Vermont residents were affected. The organization engaged forensic specialists, secured its network, and notified federal law enforcement. Affected individuals were offered 12 months of complimentary credit monitoring and fraud assistance via Cyberscout/TransUnion.

Woodfords Family Services notified individuals of a data security incident discovered on April 8, 2024, involving unauthorized access to certain files and folders on their network. The information involved included names. The organization secured systems, engaged forensic specialists, and notified federal law enforcement. Complimentary credit monitoring services are being offered.

Woodfords Family Services reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-08 and was reported on 2026-03-27. 3 Indiana residents were affected. 41,984 individuals affected in total.

Woodfords Family Services, a Maine healthcare provider, disclosed a ransomware incident caused by the Medusa actor group. Unauthorized access occurred on April 8, 2024, affecting 8,073 individuals, including 7,701 Maine residents. Compromised data included names, SSNs, driver's licenses, financial accounts, and PHI. Notices were sent on March 27, 2026, offering 12 months of credit monitoring.

Woodfords Family Services, a Maine-based provider of clinical and behavioral services for individuals with disabilities, disclosed a ransomware incident involving the Medusa threat actor. Discovered on April 8, 2024, the breach affected three Nebraska residents, exposing names, SSNs, driver’s license numbers, financial account info, and medical data. Woodfords engaged forensic investigators, secured its network, notified HHS OCR and law enforcement, and offered 12 months of credit monitoring. Notification to Nebraska AG was filed March 27, 2026.

Woodfords Family Services (Maine) reported to HHS OCR on 2026-03-27 a Hacking/IT Incident affecting 38,061 individuals. Breached information was located on Desktop Computer, Electronic Medical Record, Email, and Network Server. No business associate was identified. No further detail was provided in the public disclosure.

Woodfords Family Services reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-08 and was reported on 2026-03-27. 3 Indiana residents were affected. 41,984 individuals affected in total.

WOODFORDS FAMILY SERVICES filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1107). The register records the breach as discovered on January 29, 2026. Personal information types reported: security question answer, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Woodfords Family Services (ME) reported to HHS OCR on 2024-06-03 a Hacking/IT Incident (ransomware attack) affecting 500 individuals. PHI involved included treatment information. Breached information was located on Desktop Computer, Electronic Medical Record, Email, and Network Server. The CE notified affected individuals and implemented additional administrative and technical safeguards in response.

Woodfords Family Services was founded in 1967 and its main activity is the support and integration of people with disabilities. Woodfords Family Services corporate office is located in 15 Saunders Way Ste 900, Westbrook, Maine, 04092, United States and has 435 employees. The total amount of data leakage is 198.5 GB

Woodfords Family Services notified the NH AG that unauthorized access to its network occurred on or around June 19, 2023. The incident compromised email accounts containing personal information, including names, SSNs, and medical data, affecting approximately 74 NH residents. Notifications were sent on November 10, 2023, offering credit monitoring.

Woodfords Family Services notified individuals of unauthorized network access occurring on or around June 19, 2023. Investigation concluded October 12, 2023, revealing full names were removed. Services included 12-month credit monitoring via Cyberscout/Identity Force. Approximately 5 Rhode Island residents impacted.

Woodfords Family Services (ME) reported to HHS OCR on 2023-11-10 a Hacking/IT Incident (ransomware bot attack) affecting 6,691 individuals. Breached information was located on a Network Server. PHI involved included names, addresses, birthdates, drivers' license and Social Security numbers, diagnoses, claims, financial information, and other treatment information. The CE notified HHS, affected individuals, and the media, and implemented additional technical and security safeguards.

Woodfords Family Services, a healthcare organization, reported a data breach affecting 17,285 individuals, including 16,862 Maine residents. The breach occurred on June 19, 2023, and was discovered on October 12, 2023. The incident was described as an external system breach or hacking, resulting in the compromise of names and financial account or payment card numbers along with their access codes. Affected individuals were notified on November 10, 2023, and offered 12 months of complimentary credit monitoring services.

Woodfords Family Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-10. 54 Massachusetts residents were affected. The report records the breach type as electronic.