Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
FRED HUTCHINSON CANCER RESEARCH CENTER
bd_612b6454785998fe · schema v1 · pii pii-v1
Full breach record for FRED HUTCHINSON CANCER RESEARCH CENTER →Fred Hutchinson Cancer Center experienced a data breach involving unauthorized access to an employee's business email account. The incident occurred between March 25 and 26, 2022, when an unauthorized individual accessed the account, likely via phishing. The breach compromised personal information, including names and government identifiers, of affected individuals. The Center secured the account, engaged forensic investigators, and notified federal law enforcement. Affected individuals were offered one year of Experian IdentityWorks credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-558466
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 20, 2022
- Raw hash
- cb3d34a06a9d7ba74b329fc9a2877e31f63655f4bb484c48cecb6ea80bfda2df
Reporting entity
- Name
- FRED HUTCHINSON CANCER RESEARCH CENTERnorm: fred hutchinson cancer research center
- Domain
- fredhutch.org
Victim entity
- Name
- FRED HUTCHINSON CANCER RESEARCH CENTERnorm: fred hutchinson cancer research center
- Domain
- fredhutch.org
Incident
- Discovered
- Mar 26, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 30 weeks(208 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.