• March 2026 •

Woodfords Family Services Data Breach

Last Updated on April 9, 2026

If your information was compromised in the Woodfords data breach, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people affected by the Woodfords data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you believe your information may have been compromised in the Woodfords data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the Woodfords breach.

Woodfords Data Breach: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Woodfords data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the Woodfords data breach or otherwise believe they are affected.

Woodfords Security Incident: What Happened?

Woodfords Family Services, a provider of specialized clinical, educational, and behavioral services for individuals with disabilities in Westbrook, Maine, has reported a data breach affecting 41,984 individuals.

A letter sent to the Maine Attorney General’s Office states that on April 8, 2024, the organization discovered suspicious network activity. After securing the network, Woodfords began an investigation with forensic specialists. They confirmed unauthorized access and found signs that data had been removed from its network, ultimately tying the breach to the ransomware group, Medusa.

The forensic investigation concluded on May 30, 2024, followed by an internal review to assess the affected data. Unable to fully determine the scope internally, Woodfords engaged data mining specialists on September 25, 2024. This process concluded on October 3, 2025, but further review was needed to evaluate the full scope of the affected information.

By January 29, 2026, it was confirmed that the information compromised in the Woodfords data breach included first and last names, Social Security numbers, driver’s license numbers, financial account information, medical diagnostic and treatment data, and health insurance information.

Notifications were mailed to affected individuals beginning March 27, 2026 (sample notice pictured below).

What You Can Do After the Woodfords Data Breach

If your information was exposed in the Woodfords data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Woodfords to ensure they take proper steps to protect the information they were entrusted with.

Affected by the Woodfords data breach? Fill out the form on this page today.