Wood River Health

Wood River Health notified consumers of a data security incident affecting an employee email account between August 8, 2024, and September 6, 2024. The unauthorized actor accessed the account, potentially viewing names, SSNs, medical records, and login credentials. WRH engaged outside investigators, notified federal law enforcement, and offered credit monitoring services.

Wood River Health (RI) reported to HHS on 2025-07-28 a Hacking/IT Incident (email phishing) affecting 54,926 individuals. An employee was targeted by an email phishing scheme exposing PHI including clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media, provided substitute notice, and offered complimentary credit monitoring. Additional administrative, technical, and security safeguards were implemented. Breached information located on Email.

Wood River Health, a healthcare organization, reported an external system breach that was discovered on May 29, 2025. The breach, which occurred on August 8, 2024, affected 64 Maine residents. The company notified the affected individuals in writing on July 28, 2025, and offered 12 months of identity theft protection services through TransUnion.

Wood River Health notified the New Hampshire AG of a data security incident affecting an employee email account. Unauthorized access occurred between August 8 and September 6, 2024, exposing patient names, SSNs, medical records, and credentials. 39 NH residents were notified on July 28, 2025. The company engaged investigators, notified law enforcement, and provided 12 months of credit monitoring.

Wood River Health reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-08 and was reported on 2025-07-28. 9 Indiana residents were affected. 54,926 individuals affected in total.