Social EngineeringHealthcareHealthcarePhishingCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PHIHighContained

Spokane Digestive Disease Center, P.S.

bd_46e4ed9b47a9a418 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 19, 2026

Filed

May 26, 2026

To disclose

14 weeks

Affected

2,093state residents only

Confidence

71%

Full breach record for Spokane Digestive Disease Center, P.S. →2 incidents on file

Spokane Digestive Disease Center, P.S. reported a phishing incident affecting 2,093 Washington residents. Unauthorized access to an employee email account occurred between Jan 22 and Feb 18, 2026. Exposed data included names, DOBs, SSNs, driver's licenses, financial info, and medical records. Notices sent May 26, 2026. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d14 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 28 days

discovery → filing · 14 weeks / 96 days

Jan 22, 2026

Begins

Feb 19, 2026

Discovered

May 26, 2026

Filed

vs. sector median

+3 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,093 affectedView incident

Name: Spokane Digestive Disease Center, P.S.
norm: spokane digestive disease center ps

Name: Spokane Digestive Disease Center, P.S.
norm: spokane digestive disease center ps
Industry: Healthcarellm

Discovered: Feb 19, 2026
Breach occurred: Jan 22, 2026 – Feb 18, 2026
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 26, 2026
Affected individuals: 2,093state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Providing written notice of this incident to relevant state regulatorsNotifying the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Initial access: phishing_link

During the incident: Secured its email environment
Launched an investigation to determine the nature and scope of the activity
Performed a comprehensive review of the accessed emails and attachments
Provided written notice of this incident to two thousand ninety three (2,093) Washington residents
Provided access to credit monitoring services for one (1) year through Experian to individuals whose personal information was potentially affected by this incident
Providing written notice of this incident to relevant state regulators
Notifying the U.S. Department of Health and Human Services and prominent media pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Changes made: Implementing additional safeguards
Additional training to its employees to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(96 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA41058.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2026
Raw hash: a9dadc00763ff826cb5de0540e49958a0ef79ee19efa0d250a4dfdbcc5c7e0e1

Reporting entitySpokane Digestive Disease Center, P.S.

Victim entitySpokane Digestive Disease Center, P.S.

Incidentdiscovered Feb 19, 2026

Stated responseSecured its email environment

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com