HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
FRED HUTCHINSON CANCER RESEARCH CENTER
bd_055977ba69ddd432 · schema v1 · pii pii-v1
Full breach record for FRED HUTCHINSON CANCER RESEARCH CENTER →Fred Hutchinson Cancer Center detected unauthorized activity on its clinical network on November 19, 2023. An unauthorized third party accessed the network and obtained files containing patient information, including names, addresses, SSNs, and health insurance details, between November 19 and November 25, 2023. The organization contained the activity, engaged forensic investigators, and is offering identity protection services to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_b7c7ee56fd79dc24Washington State AGfiled 2023-12-22Candidate
- bd_12adcd78f9e863afVermont State AGfiled 2023-12-20(2d gap)Verified
- bd_7a61dc29d42aa0dbIndiana State AGfiled 2023-12-20(2d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578365
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2023
- Raw hash
- 79dbaedb0354ce1ec63a7734454c4d561b60c8134a4635c5305643d252090f23
Reporting entity
- Name
- FRED HUTCHINSON CANCER RESEARCH CENTERnorm: fred hutchinson cancer research center
- Domain
- fredhutch.org
Victim entity
- Name
- FRED HUTCHINSON CANCER RESEARCH CENTERnorm: fred hutchinson cancer research center
- Domain
- fredhutch.org
Incident
- Discovered
- Nov 19, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Filed notification with California Attorney General
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.