Buena Vista Management Services, LLC DBA Windward Life Care, a healthcare provider for older and disabled adults, detected unusual activity on its network on December 8, 2025. This activity led to the discovery of unauthorized access to personal information. The company secured its network and engaged forensic specialists to investigate the incident. Official breach notification letters were sent to affected individuals starting April 10, 2026, following the completion of data review on April 6, 2026.
The types of data potentially exposed vary by individual and may include names, Social Security numbers, dates of birth, addresses, government IDs (such as driver's license numbers, taxpayer identification numbers, and passport information), patient identification numbers, personal identification numbers, financial account numbers, debit/credit card numbers, medical information, health insurance information, usernames, email addresses, handwriting/electronic signatures, and other account access information. The ransomware group "Sinobi" claimed responsibility for the breach and stated they exfiltrated approximately 25GB of data. The exact number of affected individuals has not been publicly disclosed, though the breach affected residents in multiple states, including California, Maine, New Hampshire, and Vermont. Buena Vista Management Services, LLC DBA Windward Life Care offered 12 months of complimentary credit monitoring and identity protection services to those affected.
Investigations by law firms are ongoing, and additional details may emerge as these investigations progress and regulatory bodies continue their oversight.