Woundtech data breach: files copied in December 2025, and letters in March 2026

What happened at Woundtech?

Woundtech says it began investigating as soon as it saw the activity and hired a third-party cybersecurity firm for a forensic investigation. That investigation found on December 31, 2025 that information may have been copied. Woundtech then reviewed the data to work out whose information was involved, and finished that review on March 2, 2026.

Date	What the letter and the regulators' records say
December 6, 2025	Unusual activity in the network; first day of the activity
December 9, 2025	Last day of the activity
December 31, 2025	Forensic investigation finds information may have been copied
January 28, 2026	Report to HHS (139,830)
March 2, 2026	Review of the data finished
March 16, 2026	Letter date; notice recorded by California

Woundtech's report to HHS came about five weeks before it finished working out who was affected. The letters followed two weeks after that, about 100 days after the activity began. The guide to how long companies take to notify sets that gap against other notices.

What information was involved?

The letter says the information varied by person, and each letter lists the reader's own items. The sample filed with California leaves that list blank, and neither the California record nor the HHS entry names the data elements. HHS records the breach as a hacking incident on a network server.

What is Woundtech offering?

Item	Detail from the letter
Service	Single-bureau credit monitoring, credit report and credit score, with alerts for 12 months from enrollment
Provider	Cyberscout, a TransUnion company
Also included	Proactive fraud assistance
Enrollment	Within 90 days of the letter date, at bfs.cyberscout.com/activate, with the code printed on the letter
Questions	833-297-3496, Monday to Friday, 8:00 a.m. to 8:00 p.m. Eastern Time, excluding major U.S. holidays

Enrollment needs an internet connection and an email account, and may not be open to people under 18. The guide to credit monitoring offers in breach letters compares single-bureau and three-bureau services.

What Texas's attorney general recorded

Texas's attorney general lists a report from Wound Technology Network, Inc, posted on March 17, 2026, with 3,809 Texans affected, a count of Texas residents only. The record lists names, Social Security numbers, medical information, health insurance information and dates of birth as involved.

What the documents leave open

• How the unauthorized individual got into the network.
• Whether the copied information has been published or misused; the letter does not say either way.

Woundtech's case sits among the year's provider reports in the ranking of 2026 healthcare breaches reported to HHS.