HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)PHIHighContained

Anchorage Neighborhood Health Center

bd_f1e99ab00617f16e · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 10, 2025

Filed

Nov 26, 2025

To disclose

7 weeks

Affected

3,226state residents only

Linked

11 filings

Confidence

69%

Full breach record for Anchorage Neighborhood Health Center →

Anchorage Neighborhood Health Center (ANHC) notified the Washington Attorney General of a criminal cyberattack affecting 3,226 Washington residents. The incident, discovered on October 10, 2025, exposed PII including names, SSNs, driver's licenses, and PHI including medical treatment and health insurance information. ANHC engaged third-party experts, deployed EDR, rebuilt servers, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d7 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 7 weeks / 47 days

Oct 10, 2025

Discovered

Nov 26, 2025

Filed

vs. sector median

6 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_e2e5b7564a8a64f52025-11-25 · +1dVerified
New Hampshire State AGbd_da91e6360340f5732025-11-24 · +2dVerified
Texas State AGbd_e3f42482c6a7a33d2025-11-21 · +5dVerified
Indiana State AGbd_2f7c89d3b6e0c9372025-11-19 · +7dVerified

Show 6 more filings ↓up to 7d gap

Montana State AGbd_583cd41e4a1709902025-11-19 · +7dVerified
Nebraska State AGbd_798fb13746c589ca2025-11-19 · +7dVerified
Maine State AGbd_a2c285d25238254c2025-11-19 · +7dVerified
HHS OCRbd_b0f241cdb20203252025-11-19 · +7dVerified
California State AGbd_d436900ecfb26e672025-11-19 · +7dVerified
Oregon State AGbd_e0c77bd0a7b06d482025-11-19 · +7dVerified

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Anchorage Neighborhood Health Center
norm: anchorage neighborhood health center
Industry: Healthcarellm

Discovered: Oct 10, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 3,226state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: NameSocial Security numberDriver's licence numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Submitted Data Incident Notification to the Office of the Attorney General, Consumer Protection Division, Seattle, WA
Initial access: exploit_public_facing

During the incident: With assistance from third-party experts, ANHC took immediate steps to secure its systems and investigate the nature and scope of the Incident
Deployed endpoint detection and response within its environment, including 24/7 managed detection and response services
Rebuilt all servers impacted by the Incident
Reset all passwords throughout its systems
In the process of thoroughly reviewing and upgrading its data security policies and procedures
Arranged for the individuals to enroll in free credit monitoring and related services for at least 12 months
Changes made: Deployed endpoint detection and response within its environment, including 24/7 managed detection and response services
Rebuilt all servers impacted by the Incident
Reset all passwords throughout its systems
Reviewing and upgrading its data security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Indiana State AGNov 19 · first

Montana State AGNov 19 · first

Nebraska State AGNov 19 · first

Maine State AGNov 19 · first

HHS OCRNov 19 · first

California State AGNov 19 · first

Oregon State AGNov 19 · first

Texas State AG+2d

New Hampshire State AG+5d

Massachusetts State AG+6d

Washington State AG+7d · this page

Pattern: first filing Nov 19 (IN), last Nov 26 (WA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM20891.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2025
Raw hash: 11097febbfaf6a1b60b889e82db64800db7dc589303e95ec0093d445c1e4e1e1

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityJackson Lewis

Victim entityAnchorage Neighborhood Health Center

Incidentdiscovered Oct 10, 2025

Stated responseWith assistance from third-party experts, ANHC took immediate steps to secure its systems and investigate the nature and scope of the Incident

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com