Woodfords Family Services, a healthcare and disability services provider in Westbrook, Maine, experienced a data breach. An external system hack occurred on April 8, 2024, but was not discovered until January 29, 2026. The company then notified the Maine Attorney General on March 27, 2026.
The breach affected 41,984 individuals in total, with 3,695 Maine residents and 3 Indiana residents confirmed. The data types exposed include names, Social Security Numbers, dates of birth, driver's license numbers, passport numbers, financial account information, health insurance information, and medical diagnostic and treatment data. The full scope of affected states and the exact number of individuals impacted in each state beyond Maine and Indiana have not been publicly confirmed.
Additional details about this incident may emerge as investigations continue and as more information becomes available through official channels. Notification to affected individuals began on March 27, 2026, and further disclosures may be made.