INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

WindRose Health Network Discloses Data Breach Affecting 33K Individuals

| 2026-10-05 16:49 CRITICAL LOW DATA BREACH CRITICAL INFRASTRUCTURE & OT
JSON
Executive Summary
AI-generated
On October 5, 2026, WindRose Health Network disclosed a data breach affecting approximately 33,158 individuals in Indiana. The attack is attributed to an unauthorized third party who exploited a previously undisclosed vulnerability in a remote access tool used by one of its vendors, which was discovered on August 4, 2026. The affected patients' data included names, patient ID numbers, health insurance information, dates of service, and provider names, but not medical records. Cybersecurity experts were engaged to investigate the incident, which occurred between August 3 and August 4, 2026. As a result, WindRose Health Network has advised the affected individuals to remain vigilant against identity theft and fraud.
Technical Mitigations AI-generated
• Patch the remote access tool used by vendors to prevent exploitation of previously undisclosed vulnerabilities. • Monitor for suspicious activity on July 18, 2026, and investigate immediately if unauthorized third-party access is detected. • Review files containing patient data stored in affected parts of the network for potential access or copying.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎June 2, 2026
Threat actors used phishing tactics to target WindRose Health Network's email environment on June 2, 2026.
‎June 9, 2026
Threat actors accessed WindRose Health Network's systems on June 9, 2026.
‎June 16, 2026
WindRose Health Network disclosed a data breach affecting approximately 33,000 individuals after discovering unauthorized access to one of its computer servers on June 16, 2026.
industry Health
The home health care agency learned on June 16, 2026, that an unauthorized third party had gained access to one of its computer servers.
‎June 26, 2026
Threat actors, identified as The Gentlemen, a prolific ransomware group, acquired patient data from Camden Family Health's computer network.
organisation Social Security
On June 26, 2026, AHCC learned that the files containing patient data had been acquired in the incident, including patients’ first and last names, birth dates, addresses, phone numbers, Social Security numbers, and medical information related to the care received.
organisation AHHC
Employee data was also compromised related to the AHHC employee health plan, including health insurance and plan enrolment information, claims information, healthcare provider information, and health benefits information.
organisation Camden Family Health
Camden-on-Gauley Medical Center, West Virginia Camden Family Health, a network of community health centers serving the Mountain Lake Region in West Virginia, has identified unauthorized access to parts of its computer network.
‎July 18, 2026
Threat actors accessed the network of Lakes Region Visiting Nursing Association on July 18, 2026.
organisation Medicare
Lakes Region Visiting Nursing Association, New Hampshire Lakes Region Visiting Nursing Association, a non-profit Medicare-certified home health and hospice agency based in Meredith, New Hampshire, has notified 1,274 individuals about a recent security incident.
organisation the HHS’ Office for Civil Rights
The incident has been reported to the HHS’ Office for Civil Rights using an estimate of at least 501 individuals.
‎August 4, 2026
Threat actors used a vulnerability to target Advantage Home Health Care, resulting in the potential unauthorized access or copying of patient data affecting 19,851 individuals.
industry Health
The vendor informed WindRose Health Network about the vulnerability on August 4, 2026.
organisation Advantage Home Care
Advantage Home Care, Missouri Advantage Home Health Care (AHHC), one of the largest home healthcare providers in the state of Indiana, has notified 19,851 individuals about a recent cybersecurity incident.
organisation Advantage Home Health Care
Advantage Home Care, Missouri Advantage Home Health Care (AHHC), one of the largest home healthcare providers in the state of Indiana, has notified 19,851 individuals about a recent cybersecurity incident.
‎August 13, 2026
Threat actors used unauthorized access to review an account on August 13, 2026.
‎Oct 5, 2026
WindRose Health Network disclosed a cybersecurity incident affecting 33,158 individuals due to an exposed limited patient data.
industry Health
WindRose Health Network Discloses Data Breach Affecting 33K Individuals Posted By Steve Alder on Oct 5, 2026 Data breaches have been announced by WindRose Health Network and Advantage Home Health Care in Indiana, Camden-on-Gauley Medical Center in West Virginia, and Lakes Region Visiting Nursing Association in New Hampshire.
tactic Data Breach
WindRose Health Network Discloses Data Breach Affecting 33K Individuals Posted By Steve Alder on Oct 5, 2026 Data breaches have been announced by WindRose Health Network and Advantage Home Health Care in Indiana, Camden-on-Gauley Medical Center in West Virginia, and Lakes Region Visiting Nursing Association in New Hampshire.
general_metric 33 Individuals
WindRose Health Network Discloses Data Breach Affecting 33K Individuals Posted By Steve Alder on Oct 5, 2026 Data breaches have been announced by WindRose Health Network and Advantage Home Health Care in Indiana, Camden-on-Gauley Medical Center in West Virginia, and Lakes Region Visiting Nursing Association in New Hampshire.
organisation K Individuals Posted
WindRose Health Network Discloses Data Breach Affecting 33K Individuals Posted By Steve Alder on Oct 5, 2026 Data breaches have been announced by WindRose Health Network and Advantage Home Health Care in Indiana, Camden-on-Gauley Medical Center in West Virginia, and Lakes Region Visiting Nursing Association in New Hampshire.
organisation Lakes Region Visiting Nursing Association
WindRose Health Network Discloses Data Breach Affecting 33K Individuals Posted By Steve Alder on Oct 5, 2026 Data breaches have been announced by WindRose Health Network and Advantage Home Health Care in Indiana, Camden-on-Gauley Medical Center in West Virginia, and Lakes Region Visiting Nursing Association in New Hampshire.
organisation WindRose Health Network
WindRose Health Network, Indiana WindRose Health Network, a network of Federally Qualified Health Centers that provide primary care and behavioral health services at several locations in central Indiana, has started notifying 33,158 individuals about a cybersecurity incident that exposed limited patient data.
organisation Federally Qualified Health Centers
WindRose Health Network, Indiana WindRose Health Network, a network of Federally Qualified Health Centers that provide primary care and behavioral health services at several locations in central Indiana, has started notifying 33,158 individuals about a cybersecurity incident that exposed limited patient data.
‎between August 3 and August 4, 2026
Threat actors exploited a vulnerability to gain unauthorized network access between August 3 and August 4, 2026.
Intelligence Sources
HIPAA Journal 2026-10-05