Family of Woodstock
Disclosed Oct 17, 20214 years ago8,592 affectedConfirmed
The covered entity (CE), Family of Woodstock, reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of 8,214 individuals. The ePHI involved included names, addresses, telephone numbers, email addresses, dates of birth, Social Security numbers, drivers’ license numbers, diagnoses, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its ePHI.
What is known
| People affected | 8,592 (as reported by the organization) |
|---|---|
| Disclosed | Oct 17, 2021 |
| Happened | Aug 3, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Family of Woodstockin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Family of Woodstock (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 17, 2021 | 8,214 |
| Indiana AGresidents of IN | Oct 18, 2021 | 6 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2021-10-18 to 2021-10-17 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Family of Woodstock, reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of 8,214 individuals. The ePHI involved included names, addresses, telephone numbers, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.