Windward Life Care Data Breach Exposes Sensitive Personal and Medical Information On December 8, 2025, Buena Vista Management Services, LLC (operating as Windward Life Care), a San Diego-based provider of in-home care for older and disabled adults, detected unusual activity on its computer network. An investigation revealed that an unauthorized actor may have accessed and exfiltrated sensitive personal data. The compromised information includes names, Social Security numbers, driver’s license and passport details, financial account and payment card numbers, medical records, health insurance data, and other personally identifiable information. The breach was disclosed in a filing with the Maine Attorney General. Windward Life Care first identified the incident in December 2025, though the exact duration of the unauthorized access remains unclear. The law firm Edelson Lechtzin LLP has since launched a class action investigation on behalf of affected individuals, seeking legal remedies for potential identity theft and fraud risks. The breach underscores the growing threat to healthcare-related organizations, where sensitive data remains a prime target for cybercriminals. No further details on the scope of affected individuals or the attack vector have been publicly released.