Confirmed breach. Intrusion May 24, 2025–May 28, 2025, discovered May 28, 2025 — the first regulatory filing landed 369 days later. 27,113 individuals reported across the linked filings.
Waveny Lifecare Network issued a Massachusetts Attorney General breach notification (Ref: 2026-925) regarding a phishing incident. The breach compromised customer data, including names and Social Security numbers. The organization provided 24 months of complimentary credit monitoring and identity protection services via Cyberscout (TransUnion) to affected individuals.
🏎️Indiana State AGlinked via same-victim cross-source · 100%
Waveny Lifecare Network reported a data breach to the Indiana Attorney General. The breach occurred on 2025-05-28 and was reported on 2026-06-02. 5 Indiana residents were affected. 8,548 individuals affected in total.
Affected (this filing): 8,548
🇺🇸CTHHS OCRlinked via same-victim cross-source · 100%
Waveny LifeCare Network, Inc. reported to HHS on 2026-06-02 a Hacking/IT Incident affecting 27113 individuals. Breached information located on Network Server.
Affected (this filing): 27,113
HHS notified
Most recent
3 State AG filingsJun 2, 2026 – Jun 3, 2026ExpandCollapse
NHMEVT
⛰️New Hampshire State AGlinked via same-victim cross-source · 100%
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Waveny Lifecare Network notified the New Hampshire Attorney General of a data event affecting 46 NH residents. Unauthorized access occurred between May 24-28, 2025, exposing names, SSNs, financial account info, and health/insurance data. Waveny engaged third-party specialists, secured systems, reset passwords, and offered 12 months of credit monitoring.
Affected (this filing): 46
🦞Maine State AGlinked via multistate filing link · 100%
Waveny Lifecare Network, a healthcare entity based in New Canaan, CT, reported an external system breach (hacking) occurring on May 24, 2025, discovered on March 24, 2026. The incident affected 8,548 individuals, including 19 Maine residents. Notification was sent on June 2, 2026, offering 12 months of credit monitoring via TransUnion. The breach involved unauthorized access to external systems.
Affected (this filing): 8,548
ME AG >30d · 70dME resident >60d · 70d
🍁Vermont State AGlinked via same-victim cross-source · 100%
Waveny Lifecare Network reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-03. The reporting organization type is Health Care. 9 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Info, Health Records.