On December 8, 2025, Windward Life Care appeared on the leak site of the sinobi ransomware group. The San Diego-based provider of home care, aging life care management, and skilled nursing services for older and disabled adults is claimed to have had internal files exfiltrated during a ransomware attack. While the exact number of people affected remains unknown, anyone who received services from the company, shared personal documents, or had a family member listed as a client could have information now in attackers’ hands.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Windward Life Care
Get alerted the next time Windward Life Care files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Windward Life Care’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that sinobi posted Windward Life Care to its dark-web leak portal on December 8, 2025. The listing states that internal files were successfully exfiltrated. Available details describe the victim as a home-care organization with more than 20 years of operation in the San Diego area, handling sensitive records tied to personal care, medical coordination, and client households. No confirmed count of exposed records has been released, and the precise data types have not been independently verified beyond the group’s claim of stolen internal files.
Why This Matters for You and Your Family
When a care provider that serves older parents or disabled relatives is breached, the information at risk often includes names, addresses, dates of birth, medical histories, insurance details, and contact information for family members. These records can be used to impersonate you or your loved ones, file fraudulent claims, or open accounts in your name. For families already managing health challenges, the added stress of monitoring for identity theft or financial fraud can feel overwhelming. Even if you never directly hired Windward Life Care, shared family records or joint insurance documents may still place your household in the exposed dataset.
The Doxxing and Identity-Chain Risks
Ransomware leaks rarely stop at one company. Attackers frequently cross-reference stolen data with other breaches to build detailed profiles. A phone number from a care-provider file can link to an email address used for a child’s gaming account, which then reveals a home address and family relationships. This identity-chain mapping turns isolated leaks into persistent doxxing threats. Credential leaks like this one routinely cascade into account takeovers across email, banking, and gaming platforms. Protecting both adult and children’s accounts is therefore essential, because a single reused password or exposed family detail can unravel privacy for everyone living at the same address.