Windward Life Care Data Breach Exposes Sensitive Personal and Medical Information
On December 8, 2025, Buena Vista Management Services, LLC (operating as Windward Life Care), a San Diego-based provider of in-home care for older and disabled adults, detected unusual activity on its computer network. An investigation revealed that an unauthorized actor may have accessed and exfiltrated sensitive personal data.
The compromised information includes names, Social Security numbers, driver’s license and passport details, financial account and payment card numbers, medical records, health insurance data, and other personally identifiable information. The breach was disclosed in a filing with the Maine Attorney General.
Windward Life Care first identified the incident in December 2025, though the exact duration of the unauthorized access remains unclear. The law firm Edelson Lechtzin LLP has since launched a class action investigation on behalf of affected individuals, seeking legal remedies for potential identity theft and fraud risks.
The breach underscores the growing threat to healthcare-related organizations, where sensitive data remains a prime target for cybercriminals. No further details on the scope of affected individuals or the attack vector have been publicly released.
BuenaVista Information Systems cybersecurity rating report: https://www.rankiteo.com/company/bvillc
"id": "BVI1776133687",
"linkid": "bvillc",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'San Diego, California, USA',
'name': 'Buena Vista Management Services, LLC '
'(Windward Life Care)',
'type': 'Healthcare Provider'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Driver’s license details',
'Passport details',
'Financial account numbers',
'Payment card numbers',
'Medical records',
'Health insurance data',
'Other personally identifiable '
'information']},
'date_detected': '2025-12-08',
'description': 'On December 8, 2025, Buena Vista Management Services, LLC '
'(operating as Windward Life Care), a San Diego-based provider '
'of in-home care for older and disabled adults, detected '
'unusual activity on its computer network. An investigation '
'revealed that an unauthorized actor may have accessed and '
'exfiltrated sensitive personal data. The compromised '
'information includes names, Social Security numbers, driver’s '
'license and passport details, financial account and payment '
'card numbers, medical records, health insurance data, and '
'other personally identifiable information.',
'impact': {'data_compromised': 'Sensitive personal and medical information',
'identity_theft_risk': 'Potential identity theft and fraud risks',
'payment_information_risk': 'Payment card numbers compromised',
'systems_affected': 'Computer network'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Maine Attorney General filing'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation '
'launched by Edelson Lechtzin LLP',
'regulatory_notifications': 'Filing with the Maine '
'Attorney General'},
'title': 'Windward Life Care Data Breach Exposes Sensitive Personal and '
'Medical Information',
'type': 'Data Breach'}