Woodfords Family Services Reports Second Ransomware Attack Impacting Thousands
Learn More
Woodfords Family Services, a Maine-based nonprofit providing support for individuals with disabilities, reports a data breach following a ransomware attack that occurred on April 8, 2024.
The organization initially discovered suspicious activity on the day of the attack but it did not confirm the compromise of protected health information (PHI) until January 29, 2026. This incident follows a previous ransomware event in late 2023.
The attackers remained in the system long enough to access sensitive data sets. The compromised data includes:
- Full names
- Social Security numbers
- Driver’s license or government identification numbers
- Passport numbers
- Dates of birth
- Financial account information
- Medical diagnostic and treatment information
- Health insurance information
The number of affected individuals is 8,073. It's not clear why the company waited almost 2 years before reporting the incident.
Woodfords Family Services took parts of its network offline to contain the attack. The organization hired forensic specialists to investigate the breach and notified the HHS Office for Civil Rights. Affected individuals are receiving 12 months of complimentary credit monitoring and identity protection services.
