Nottingham Village Data Breach Exposes Sensitive Information of Nearly 8,000 Individuals
Nottingham Village, a senior living and healthcare provider in Northumberland, Pennsylvania, confirmed a data breach affecting 7,919 individuals across the U.S., including four in Maine. The incident, detected on November 9, 2025, involved unauthorized access to the organization’s network, with cybercriminals potentially exfiltrating files between November 8 and 9, 2025.
An investigation, assisted by external cybersecurity experts, later determined that sensitive personally identifiable information (PII) was compromised. Nottingham Village notified affected individuals in writing on May 22, 2026, nearly six months after confirming the breach on May 12, 2026.
The ransomware group Qilin claimed responsibility for the attack, posting about the breach on the dark web on November 25, 2025, and asserting they had stolen 110 GB of data. Nottingham Village operates a 100-plus acre retirement community offering independent living, assisted living, memory care, and skilled nursing services.
Legal firms, including Shamis & Gentile P.A., are investigating potential compensation claims for those impacted. The breach underscores the growing threat of ransomware attacks targeting healthcare providers and the delayed disclosure timelines in such incidents.
Source: https://www.claimdepot.com/investigations/nottingham-village-data-breach-2026
NOTTINGHAM VILLAGE LLC cybersecurity rating report: https://www.rankiteo.com/company/nottingham-village-llc
"id": "NOT1779827791",
"linkid": "nottingham-village-llc",
"type": "Ransomware",
"date": "11/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '7919',
'industry': 'Senior Living and Healthcare',
'location': 'Northumberland, Pennsylvania, USA',
'name': 'Nottingham Village',
'size': '100-plus acre retirement community',
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized network access',
'customer_advisories': 'Written notifications sent on May 22, 2026',
'data_breach': {'data_exfiltration': '110 GB of data',
'number_of_records_exposed': '7919',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally identifiable '
'information (PII)'},
'date_detected': '2025-11-09',
'date_publicly_disclosed': '2025-11-25',
'description': 'Nottingham Village, a senior living and healthcare provider '
'in Northumberland, Pennsylvania, confirmed a data breach '
'affecting 7,919 individuals across the U.S., including four '
'in Maine. The incident involved unauthorized access to the '
'organization’s network, with cybercriminals potentially '
'exfiltrating files. The ransomware group Qilin claimed '
'responsibility for the attack, posting about the breach on '
'the dark web and asserting they had stolen 110 GB of data.',
'impact': {'brand_reputation_impact': 'Potential reputational damage',
'data_compromised': 'Sensitive personally identifiable information '
'(PII)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential compensation claims',
'systems_affected': 'Network systems'},
'investigation_status': 'Completed',
'motivation': 'Data exfiltration, Ransomware',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Qilin'},
'references': [{'source': 'Dark web post by Qilin'}],
'regulatory_compliance': {'legal_actions': 'Potential compensation claims '
'investigated by Shamis & Gentile '
'P.A.'},
'response': {'communication_strategy': 'Written notifications to affected '
'individuals on May 22, 2026',
'third_party_assistance': 'External cybersecurity experts'},
'threat_actor': 'Qilin',
'title': 'Nottingham Village Data Breach Exposes Sensitive Information of '
'Nearly 8,000 Individuals',
'type': 'Data Breach, Ransomware'}