HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDPHIHealth (basic)MediumContained

Washington Gastroenterology (DHSWA.NET)

bd_a7c6808bffa98bd6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 10, 2025

Filed

Aug 22, 2025

To disclose

24 weeks

Affected

Not disclosed

Linked

10 records

Confidence

65%

Full breach record for Washington Gastroenterology (DHSWA.NET) →

Washington Gastroenterology (WAGI) notified the California Attorney General of a data breach affecting patient information. The incident occurred on October 23, 2024, but was not discovered until March 10, 2025. An unknown third party accessed and exposed data including names, Social Security numbers, and medical information from a legacy system. WAGI engaged a forensic firm, secured its systems, and is offering credit monitoring and identity restoration services to affected individuals. The investigation is ongoing but systems are secure.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 10, 2025 → Notified May 23, 202574d ✗ CA 60-day late24 weeks discovery → filing

Incident timeline

undetected · 138 days

discovery → filing · 24 weeks / 165 days

Oct 23, 2024

Begins

Mar 10, 2025

Discovered

Aug 22, 2025

Filed

vs. sector median

+15 wks slower

This filing is one of 10 records about the same incident.View merged incident

A leak claim by inc_ransom about this victim was first seen 217 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteinc_ransombd_4436a8fdef7f5ef42025-01-17 · +217dVerified

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_038e9e7d9d536dc42025-08-22Verified
New Hampshire State AGbd_44f4768b3a04a1ed2025-08-22Verified
Texas State AGbd_3be4517fb0653ab02025-08-26 · +4dVerified
Illinois State AGbd_786f230c29b384102025-09-01 · +10dVerified by operator

Show 4 more filings ↓up to 105d gap

Montana State AGbd_0a70c1602ac9e3e12025-05-23 · +91dVerified by operator
Nebraska State AGbd_4a6775f40250687e2025-05-23 · +91dCandidate
Washington State AGbd_a0f3e46923292d092025-05-23 · +91dVerified by operator
HHS OCRbd_20053881fa1fad8d2025-05-09 · +105dVerified

Name: Washington Gastroenterology (DHSWA.NET)
norm: washington gastroenterology dhswanet
Domain: washgi.com

Name: Washington Gastroenterology (DHSWA.NET)
norm: washington gastroenterology dhswanet
Domain: washgi.com
Industry: Healthcarellm

Discovered: Mar 10, 2025
Breach occurred: Oct 23, 2024
Undetected for: 138 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 23, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: Medical information
Attack vector: Unknown
Threat actor: External

During the incident: Confirmed systems were secure
Launched an investigation into the nature and scope of the activity
Initiated a diligent review of the data to determine what information was included and to whom this information belongs
Engaged a third-party forensic firm to assist in conducting a comprehensive investigation
Offering credit monitoring and identity restoration services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(165 days from discovery to filing)
Compliance flags: CA 60-day late · 74dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 10, 2025
→ Notified: May 23, 2025
74d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 10, 2025 → Notified: May 23, 2025	74d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

HHS OCRMay 9 · first

Montana State AG+14d

Nebraska State AG+14d

Washington State AG+14d

Massachusetts State AG+105d

New Hampshire State AG+105d

California State AG+105d · this page

Texas State AG+109d

Illinois State AG+115d

Pattern: first filing May 9 (WA), last Sep 1 (IL) — a 115-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-607578
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2025
Raw hash: 4dfb9e02ceced2626399781e0433e40cde4f9ad914bb2c1d4082af9a9fdec91e

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityWashington Gastroenterology (DHSWA.NET)

Victim entityWashington Gastroenterology (DHSWA.NET)

Incidentdiscovered Mar 10, 2025

Stated responseConfirmed systems were secure

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov