Windward Life Care Discloses Data Breach Impacting Sensitive Personal and Health Information Windward Life Care, a San Diego-based provider of aging life care management, in-home caregiving, and private home health nursing, recently disclosed a data breach affecting an undisclosed number of individuals. The company detected unusual activity in its network on December 8, 2025, prompting an investigation with legal counsel and third-party forensic specialists. The investigation revealed that an unauthorized individual may have accessed or copied sensitive data, with the breach believed to have begun on the same day. On January 5, 2026, the ransomware group Sinobi claimed responsibility, posting on the Tor network that it had exfiltrated 25 gigabytes of Windward Life Care’s data, including customer records, incident reports, and contracts. The group threatened to publish the data within 9 to 10 days if demands were not met. A comprehensive review of the affected data concluded on April 6, 2026, identifying exposed information as including personally identifiable information (PII) and protected health information (PHI). Compromised data may have included names, Social Security numbers, driver’s license numbers, financial account details, medical records, health insurance information, and other sensitive identifiers. Windward Life Care began notifying affected individuals on April 10, 2026, and reported the breach to the attorneys general of California and New Hampshire. As part of its response, the company is offering 12 months of complimentary credit monitoring, identity theft restoration services, and fraud assistance through Cyberscout. Affected individuals can enroll using a unique code provided in their notification letter, with a 90-day enrollment window. A dedicated assistance line (1-833-289-6231) has also been established for further support.