Women’s Wellness of Southern Delaware Discloses Data Breach Affecting Patient Information
Women’s Wellness of Southern Delaware, a medical practice in Lewes, Delaware, recently disclosed a data breach involving patient information retained by a former provider after their departure. The incident came to light on April 28, 2026, when the practice discovered the ex-provider had kept contact and medical details from their time at the facility.
The retained data included personally identifiable information (PII) and protected health information (PHI) for patients who received aesthetic services, such as names, email addresses, birthdates, gender, addresses, phone numbers, medications, allergies, photographs, medical history, and service records. For clinical services patients, the exposed data was more limited, potentially including names, phone numbers, and purchase details.
The practice believes the former provider used the retained information to contact patients about similar services at a new practice. Notifications to affected individuals began on June 26, 2026, via a public notice issued through PR Newswire.
In response, Women’s Wellness of Southern Delaware established a dedicated assistance line (1-833-786-9172) for inquiries, available Monday through Friday, 9 a.m. to 9 p.m. ET, excluding U.S. holidays. The practice directed concerned individuals to the hotline for further details.
Source: https://www.claimdepot.com/data-breach/womens-wellness-of-southern-delaware-2026
Off Coast Wellness cybersecurity rating report: https://www.rankiteo.com/company/off-coast-wellness
"id": "OFF1782752302",
"linkid": "off-coast-wellness",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Patients who received aesthetic '
'and clinical services',
'industry': 'Healthcare',
'location': 'Lewes, Delaware, USA',
'name': 'Women’s Wellness of Southern Delaware',
'type': 'Medical Practice'}],
'customer_advisories': 'Dedicated assistance line (1-833-786-9172) '
'established for inquiries',
'data_breach': {'data_exfiltration': 'Unauthorized retention and use by '
'former provider',
'personally_identifiable_information': ['Names',
'Email addresses',
'Birthdates',
'Gender',
'Addresses',
'Phone numbers',
'Medications',
'Allergies',
'Photographs',
'Medical history',
'Service records'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2026-04-28',
'date_publicly_disclosed': '2026-06-26',
'description': 'Women’s Wellness of Southern Delaware disclosed a data breach '
'involving patient information retained by a former provider '
'after their departure. The retained data included personally '
'identifiable information (PII) and protected health '
'information (PHI) for patients who received aesthetic and '
'clinical services.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High'},
'motivation': 'Unauthorized use of retained patient data for business '
'purposes',
'post_incident_analysis': {'root_causes': 'Unauthorized retention of patient '
'data by former provider'},
'references': [{'date_accessed': '2026-06-26', 'source': 'PR Newswire'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA']},
'response': {'communication_strategy': 'Public notice issued via PR Newswire',
'containment_measures': 'Established a dedicated assistance line '
'for affected individuals'},
'threat_actor': 'Former Provider',
'title': 'Women’s Wellness of Southern Delaware Data Breach',
'type': 'Data Breach'}