WOODFORDS Family Services in Maine disclosed that, after discovering suspicious activity on 8 April 2024, it began a security review and later determined that certain files and folders were accessed on that day. According to HHS’s closing statement following its investigation, the organisation reported it was the subject of a ransomware attack and, in response, implemented additional safeguards to protect PHI.
Individuals for whom Woodfords had address information were notified of the breach on 27 March 2025, while those without address information are only now learning of the incident. DataBreaches[.]net notes that the 2023 incident affected 17,285 people, with 6,691 having their PHI involved, and that a 2024 breach later affected 8,073 people in total (7,701 Maine residents), though a June 2024 notification to HHS cited 500 patients.
The notices reviewed do not name a ransomware group or indicate whether any ransom was paid, and DataBreaches could not find evidence of a data leak beyond the PHI exposure. Woodfords’ communications also point to ongoing monitoring, including complimentary credit monitoring for individuals whose SSNs were involved.