2026 WTC Health Program — TridentLocker ransomware via vendor Sedgwick/MCA (1,071 individuals)

The World Trade Center (WTC) Health Program reported to HHS that 1,071 individuals were affected after a vendor incident at Managed Care Advisors / Sedgwick Government Solutions. Forensics determined a server with WTC Health Program files was first breached November 16, 2025; TridentLocker ransomware was detected December 4, 2025, and stolen data was later published when ransom was not paid. Compromised data included names, addresses, Social Security numbers, dates of birth, and protected health information. Affected individuals were offered 12 months of complimentary credit monitoring and identity theft protection per HIPAA Journal’s May 2026 roundup.