Rockwood Retirement Communities Discloses Major Data Breach Affecting Sensitive Personal and Health Information
Rockwood Retirement Communities, a Spokane, Washington-based nonprofit senior living organization operating as Spokane United Methodist Homes, reported a data breach discovered on February 16, 2026. The incident involved unauthorized access to its network, though the specific attack method remains undisclosed.
The breach exposed a broad range of sensitive data, including personally identifiable information (PII) such as names, addresses, dates of birth, Social Security numbers, driver’s licenses, financial account details, passport numbers, and government-issued IDs as well as protected health information (PHI), including medical records, health insurance data, and Medicare numbers.
Rockwood notified the Massachusetts Office of Consumer Affairs and Business Regulation on August 25, 2026, and began sending breach notifications to affected individuals on August 20, 2026. The organization has also published a notice on its website regarding the incident.
In response, Rockwood is offering 24 months of free credit monitoring and identity protection services through Cyberscout (a TransUnion company). Affected individuals can enroll using a unique code from their notification letter, with a deadline of November 20, 2026. A dedicated helpline (1-866-898-5714) has been established for inquiries, available Monday through Friday from 5 a.m. to 5 p.m. Pacific Time.
Source: https://www.claimdepot.com/data-breach/rockwood-retirement-communities-2026
UNITED METHODIST RETIREMENT HOMES INCORPORATED cybersecurity rating report: https://www.rankiteo.com/company/united-methodist-retirement-homes-incorporated
"id": "UNI1787856376",
"linkid": "united-methodist-retirement-homes-incorporated",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Senior Living/Healthcare',
'location': 'Spokane, Washington, USA',
'name': 'Rockwood Retirement Communities (Spokane '
'United Methodist Homes)',
'type': 'Nonprofit Organization'}],
'customer_advisories': 'Affected individuals notified via letter; helpline '
'established (1-866-898-5714)',
'data_breach': {'personally_identifiable_information': ['Names',
'Addresses',
'Dates of birth',
'Social Security '
'numbers',
'Driver’s licenses',
'Financial account '
'details',
'Passport numbers',
'Government-issued '
'IDs',
'Medical records',
'Health insurance '
'data',
'Medicare numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2026-02-16',
'date_publicly_disclosed': '2026-08-25',
'description': 'Rockwood Retirement Communities, a Spokane, Washington-based '
'nonprofit senior living organization, reported a data breach '
'involving unauthorized access to its network, exposing '
'sensitive personal and health information.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'date_accessed': '2026-08-25',
'source': 'Rockwood Retirement Communities Breach Notice'}],
'regulatory_compliance': {'regulatory_notifications': ['Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation']},
'response': {'communication_strategy': 'Breach notifications sent to affected '
'individuals; website notice published',
'enhanced_monitoring': '24 months of free credit monitoring and '
'identity protection services',
'third_party_assistance': 'Cyberscout (TransUnion)'},
'title': 'Rockwood Retirement Communities Data Breach',
'type': 'Data Breach'}