Melwood Ransomware Attack and Data Breach
Learn More
Melwood, a Maryland-based nonprofit serving people with disabilities, reports a data breach following a ransomware attack claimed by the Sinobi group.
Attackers broke into the network between August 9 and August 17, 2025, accessed and copied sensitive files from the organization's systems.
The Sinobi ransomware group claimed responsibility for the hit on September 8, 2025. Melwood's investigation confirmed that unauthorized actors moved through the network and stole data before the organization could stop the activity. The exposed data includes:
- Full names
- Social Security numbers
- Home addresses
- Other sensitive PII
The number of affected individuals is not disclosed. Melwood notified the authorities and is providing 12 months of free identity and credit monitoring.
Security experts suggest placing fraud alerts or credit freezes on credit files to prevent identity theft.
