Woodfords Family Services

Woodfords Family Services (Maine healthcare provider) suffered a Medusa ransomware attack on April 8, 2024. Forensic investigation confirmed unauthorized access and data staging consistent with exfiltration. Impacted data: names, SSNs, driver's licenses, financial accounts, medical/health insurance info. 7,701 ME residents affected (41,984 total). PII scope determined January 29, 2026; notifications mailed March 27, 2026.

Woodfords Family Services, a provider of clinical and behavioral services for individuals with disabilities, disclosed a ransomware incident involving the Medusa threat actor. Discovered on April 8, 2024, the breach affected 75 New Hampshire residents, exposing names, SSNs, driver's license numbers, financial account info, and medical data. Notifications were sent on March 27, 2026, offering 12 months of credit monitoring. The organization engaged forensic and data mining specialists to determine the scope.

Woodfords Family Services notified Vermont consumers of a data security incident discovered on April 8, 2024. Unauthorized access resulted in the exposure of names. Three Vermont residents were affected. The organization engaged forensic specialists, secured its network, and notified federal law enforcement. Affected individuals were offered 12 months of complimentary credit monitoring and fraud assistance via Cyberscout/TransUnion.

Woodfords Family Services reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-08 and was reported on 2026-03-27. 3 Indiana residents were affected. 41,984 individuals affected in total.

On April 8, 2024, Woodfords Family Services (Westbrook, ME) suffered a ransomware attack by the Medusa group. Data staging and exfiltration-associated activity was observed. Due to extensive data mining, scope was not confirmed until January 29, 2026. Affected data: names, SSNs, driver's license numbers, financial accounts, medical/treatment info, and health insurance info. 7,701 Maine residents affected.

Woodfords Family Services (Maine) reported to HHS OCR on 2026-03-27 a Hacking/IT Incident affecting 38,061 individuals. Breached information was located on Desktop Computer, Electronic Medical Record, Email, and Network Server. No business associate was identified. No further detail was provided in the public disclosure.

Woodfords Family Services reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-08 and was reported on 2026-03-27. 3 Indiana residents were affected. 41,984 individuals affected in total.

Woodfords Family Services (ME) reported to HHS OCR on 2024-06-03 a Hacking/IT Incident (ransomware attack) affecting 500 individuals. PHI involved included treatment information. Breached information was located on Desktop Computer, Electronic Medical Record, Email, and Network Server. The CE notified affected individuals and implemented additional administrative and technical safeguards in response.

Woodfords Family Services was founded in 1967 and its main activity is the support and integration of people with disabilities. Woodfords Family Services corporate office is located in 15 Saunders Way Ste 900, Westbrook, Maine, 04092, United States and has 435 employees. The total amount of data leakage is 198.5 GB

Woodfords Family Services was founded in 1967 and its main activity is the support and integration of people with disabilities. Woodfords Family Services corporate office is located in 15 Saunders Way Ste 900, Westbrook, Maine, 04092, United States and has 435 employees. The total amount of data leakage is 198.5 GB

State of New Hampshire Attorney General's office received a breach notification from Woodfords Family Services on November 20, 2023. The provided document is a placeholder with no extractable breach details, dates, or data types.

Woodfords Family Services reported a data breach to the Montana Attorney General. The breach was reported on 2023-11-10. The breach occurred on 6/19/2023. 1 Montana residents were affected.

Woodfords Family Services (ME) reported to HHS OCR on 2023-11-10 a Hacking/IT Incident (ransomware bot attack) affecting 6,691 individuals. Breached information was located on a Network Server. PHI involved included names, addresses, birthdates, drivers' license and Social Security numbers, diagnoses, claims, financial information, and other treatment information. The CE notified HHS, affected individuals, and the media, and implemented additional technical and security safeguards.

Woodfords Family Services, a healthcare organization, reported a data breach affecting 17,285 individuals, including 16,862 Maine residents. The breach occurred on June 19, 2023, and was discovered on October 12, 2023. The incident was described as an external system breach or hacking, resulting in the compromise of names and financial account or payment card numbers along with their access codes. Affected individuals were notified on November 10, 2023, and offered 12 months of complimentary credit monitoring services.