Rockwood Data Breach Compromises Medical Information

Spokane United Methodist Homes, doing business as Rockwood Retirement Communities, a nonprofit senior living organization based in Spokane, Washington, disclosed a data breach that was discovered on Feb. 16, 2026.

The organization discovered suspicious activity on its network on or around Feb. 16, 2026. At this time, the organization has not described the specific method of the attack or how its systems were compromised.

The breach exposed a wide range of sensitive personal information, including personally identifiable information (PII) and protected health information (PHI).

The personal information involved included names, addresses, dates of birth, Social Security numbers, driver's license or state identification numbers, financial account information, passport numbers and government-issued identification cards.

The protected health information involved included medical information, health insurance information and medical or Medicare numbers.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Aug. 25, 2026. The organization also posted a notice on its website.

Rockwood began notifying affected individuals on Aug. 20, 2026.

Rockwood Retirement Communities' response to the breach

Rockwood is offering 24 months of complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company.

To enroll in the free monitoring services, affected individuals can visit the Cyberscout enrollment page and enter the unique code provided in their notification letter. The deadline to enroll is Nov. 20, 2026.

Rockwood has also set up a dedicated phone line for questions about the breach. Affected individuals can call 1-866-898-5714 to speak with representatives who are familiar with the incident. The phone line is available Monday through Friday from 5 a.m. to 5 p.m. Pacific Time, excluding major U.S. holidays.