MalwareHealthcareHealthcareRansomwareDragonforceData ExfiltratedData EncryptedRansom DemandedTargetedAuthenticationHealth (basic)Identity (basic)Government IDPHIHighActive

Neurological Associates of Washington

bd_0d77b486f3fd5dd5 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 6, 2026

Filed

Jan 23, 2026

To disclose

17 days

Affected

13,500state residents only

Confidence

70%

Full breach record for Neurological Associates of Washington →

Neurological Associates of Washington notified patients of a ransomware attack by the Dragonforce group. The breach, occurring around December 28, 2025, and discovered in early January 2026, encrypted medical records from 2019-2025. Data types included PHI, SSNs, and DOBs. 13,500 Washington residents were affected. The FBI and HHS were notified.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d17 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 9 days

discovery → filing · 17 days

Dec 28, 2025

Begins

Jan 6, 2026

Discovered

Jan 23, 2026

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13,500 affectedView incident

Name: Neurological Associates of Washington
norm: neurological associates of washington
Domain: neuroassociates.us

Name: Neurological Associates of Washington
norm: neurological associates of washington
Domain: neuroassociates.us
Industry: Healthcarellm

Discovered: Jan 6, 2026
Breach occurred: Dec 28, 2025
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 22, 2026
Affected individuals: 13,500state-resident count only
Data types: PHIHealth (basic)Government IDIdentity (basic)
Data elements: NameSocial Security numberDate of birthHealth insurance IDMedical informationUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware· Dragonforce
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1052 Exfiltration Over Physical Medium
Threat actor: DragonforceExternalFinancial
Regulator citations: Reports have been filed with the FBIReports have been filed with HHSReports have been filed with local law enforcement

During the incident: Reported this incident to the FBI
Migrated our electronic health records to the cloud
Prior records are securely kept on a computer with no internet access
Providing individuals with identity protection services including 12 months of credit monitoring
Changes made: Migrated our electronic health records to the cloud
Prior records are securely kept on a computer with no internet access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA36331.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 23, 2026
Raw hash: 08ae62c024d03a30e888d0b321d4b28d26f1950e5946e0787d67e92a3362f2c9

Reporting entityNeurological Associates of Washington

Victim entityNeurological Associates of Washington

Incidentdiscovered Jan 6, 2026

Stated responseReported this incident to the FBI

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com