Wood River Health
ent_9d97adf7df84698abbd821a6
Disclosures
7
State AG · HHS OCR · 7 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
54,926
nationwide · HHS OCR RI
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Wood River Health
- Normalized
- wood river health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- Vermont State AGas victim2025-07-28
Wood River Health notified consumers of a data security incident affecting an employee email account between August 8, 2024, and September 6, 2024. The unauthorized actor accessed the account, potentially viewing names, SSNs, medical records, and login credentials. WRH engaged outside investigators, notified federal law enforcement, and offered credit monitoring services.
- Massachusetts State AGas victim2025-07-28
Wood River Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-28. 210 Massachusetts residents were affected.
- RHODE ISLANDHHS OCRas victim2025-07-28
Wood River Health (RI) reported to HHS on 2025-07-28 a Hacking/IT Incident (email phishing) affecting 54,926 individuals. An employee was targeted by an email phishing scheme exposing PHI including clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media, provided substitute notice, and offered complimentary credit monitoring. Additional administrative, technical, and security safeguards were implemented. Breached information located on Email.
- Maine State AGas victim2025-07-28
Wood River Health, a healthcare provider, disclosed a data breach impacting 54,926 individuals. An unauthorized actor accessed an employee email account between August 8, 2024, and September 6, 2024. The incident exposed names, SSNs, health information, and credentials. Notices were sent on July 28, 2025, offering 12 months of credit monitoring.
- New Hampshire State AGas victim2025-07-28
Wood River Health notified the New Hampshire AG of a data security incident affecting an employee email account. Unauthorized access occurred between August 8 and September 6, 2024, exposing patient names, SSNs, medical records, and credentials. 39 NH residents were notified on July 28, 2025. The company engaged investigators, notified law enforcement, and provided 12 months of credit monitoring.
- Indiana State AGas victim2025-07-28
Wood River Health reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-08 and was reported on 2025-07-28. 9 Indiana residents were affected. 54,926 individuals affected in total.
- Illinois State AGas victim2025-07-01
WOOD RIVER HEALTH filed a data-breach notice with the Illinois Attorney General in July 2025 (case 25-07-332). The register records the breach as discovered on May 29, 2025. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.