Woodfords Family Services
Disclosed Nov 10, 20232 years ago41,984 affectedConfirmed
The covered entity (CE), Woodfords Family Services, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 500 individuals. The PHI involved included treatment information. The CE notified the affected individuals. In response to the breach the CE implemented additional administrative and technical safeguards to better protect its PHI.
What is known
| People affected | 41,984 (as reported by the organization) |
|---|---|
| Disclosed | Nov 10, 2023 |
| Happened | Apr 8, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2026-03-28 Woodfords Family Services- Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Woodfords Family Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Woodfords Family Services (Healthcare Provider, ME)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 10, 2023 | 6,691 |
| HHS archivetotal | Jun 3, 2024 | 500 |
| Indiana AGresidents of IN | Mar 27 | 3 |
| Vermont AGresidents of VT | Mar 28 |
History of this record
- 2026-09-25 · disclosed: 2024-06-03 to 2023-11-10 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2026-03-27 to 2024-06-03 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Woodfords Family Services, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 500 individuals. The PHI involved included treatment information. The CE not · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 41984 · backfill source
- 2026-09-25 · disclosed: 2026-03-28 to 2026-03-27 · backfill source
- 2026-09-25 · occurred: empty to 2024-04-08 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.