Westminster Village Greenwood Data Breach Exposes PII and PHI of 14,386 People

Westminster Village Greenwood Inc, a nonprofit senior living community in Greenwood, Indiana, has disclosed a data breach that exposed a wide range of sensitive personal and health information.

The organization reported the incident to the U.S. Department of Health and Human Services' Office for Civil Rights, the Indiana Attorney General, the Massachusetts Office of Consumer Affairs and Business Regulation, the New Hampshire Attorney General and its website as a public notice starting on March 12, 2026.

A total of 14,386 individuals were impacted, according to the U.S. Department of Health and Human Services. That includes 11,289 Indiana residents, six in Massachusetts and three in New Hampshire.

How the breach unfolded

Westminster Village Greenwood experienced unauthorized access to its network on or about Feb. 12, 2025. Upon learning of the issue, the organization began an investigation with the help of external cybersecurity professionals.

The forensic team determined that an unauthorized actor may have accessed or acquired data from the company's systems. Westminster Village Greenwood then engaged a vendor to conduct a thorough manual review of the potentially affected files.

On Jan. 23, 2026, after completing both the forensic investigation and the manual document review, the company determined that certain files may have been accessed or acquired without authorization between on or about Feb. 11, 2025, and Feb. 17, 2025.

The breach potentially exposed a broad range of personally identifiable information (PII), including full names, addresses, dates of birth, Social Security numbers, driver's license numbers, passport numbers, financial account information and usernames and passwords.

Protected health information (PHI) was also involved, including medical record numbers, medical diagnoses, medical treatment information, medications, lab results and health insurance information.

What Now?

Westminster Village Greenwood is offering complimentary access to Experian IdentityWorks Credit 3B monitoring services.

The company has also established a dedicated toll-free response line for individuals with questions about the incident. The line is staffed Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.

Affected individuals can also contact Experian's customer care team at 1-877-288-8057 for help with the monitoring service or identity restoration.