Melwood Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Melwood data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Melwood

Founded in 1963, Melwood is an organization in the Washington, D.C., Maryland and Virginia area. The organization is part of a group known as the Melwood family of companies, which advocates for and provides services to people with disabilities and their caregivers.

Melwood employs more than 1,600 people, serving more than 3,000 individuals annually.

What Happened?

Between Aug. 9 and 17, 2025, Melwood experienced a ransomware attack by a group known as Sinobi. During this incident, an unauthorized actor accessed a portion of Melwood’s computer network and copied files without permission.

The breach was publicly disclosed on Jan. 27, 2026, to the Vermont Attorney General’s office. The stolen data was also posted on a dark web network (tor) on Sept. 8, 2025.

After discovering the breach, Melwood took steps to secure its network and began reviewing the affected files to determine what information was exposed and to whom it belonged. The disclosure notice identifies names as an exposed data; however, it does not detail the additional exposed information type.

Your Rights and Next Steps

If you received a notice from Melwood or believe you may have been affected, there are several important steps you can take to protect yourself:

• Enroll in the complimentary identity monitoring services offered by Melwood through Cyberscout. This service includes single bureau credit monitoring, credit report access and credit score alerts for 12 months from enrollment.
• Monitor your financial accounts and credit reports for any suspicious activity. Under federal law, you are entitled to one free credit report each year from Equifax, Experian and TransUnion.
• Consider placing a fraud alert or a credit freeze on your credit files. A fraud alert requires businesses to verify your identity before issuing new credit, while a credit freeze restricts access to your credit report entirely.
• Stay alert for signs of identity theft or fraud, such as unfamiliar accounts or charges. If you suspect identity theft, file a report with law enforcement and the Federal Trade Commission.
• Contact the assistance line provided by Melwood at 1-833-925-1449, Monday through Friday, from 8 a.m. to 8 p.m. Eastern Time, for more information or support.

You May Be Entitled to Compensation

If your personal information was exposed in the Melwood data breach, you may be entitled to compensation.

Lawyers are ready to help individuals affected by this incident understand their rights and pursue legal action if appropriate. By joining a class action, you could recover damages for any harm caused by the breach.

To find out if you qualify and to take the next step, complete the below form to join the lawsuit investigation.

Sources

• Vermont Attorney General
• Melwood
• Dark Web