Woodlawn Hospital
Disclosed Aug 25, 20251 year ago62,278 affectedConfirmed
The covered entity (CE), Woodlawn Hospital, reported that it experienced a cyber-attack that compromised the protected health information (PHI of 62,278 individuals, The PHI involved included, demographic and clinical information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring and restoration services and implemented additional administrative and technical safeguards.
What is known
| People affected | 62,278 (as reported to HHS) |
|---|---|
| Disclosed | Aug 25, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-12-11 Woodlawn Hospital Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Woodlawn Hospital (Healthcare Provider, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 25, 2025 | 62,278 |
| Vermont AGresidents of VT | Dec 11, 2025 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 62278 · backfill source
- 2026-09-25 · disclosed: 2025-12-11 to 2025-08-25 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Woodlawn Hospital, reported that it experienced a cyber-attack that compromised the protected health information (PHI of 62,278 individuals, The PHI involved included, demographic and clinical information. The CE no · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.