PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

UW Medicine (UW Medical Center - Northwest Campus)

bd_fd40a7b40833653e · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 18, 2022

Filed

Jun 15, 2022

To disclose

8 weeks

Affected

739state residents only

Confidence

69%

Full breach record for UW Medicine (UW Medical Center - Northwest Campus) →

UW Medicine reported the theft of a laptop containing patient EMG reports, names, DOBs, and gender from the UW Medicine Neurology Clinic on April 16, 2022. 739 Washington residents were affected. The incident was discovered on April 18, 2022, and notification letters were sent on June 10, 2022.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2 days

discovery → filing · 8 weeks / 58 days

Apr 16, 2022

Begins

Apr 18, 2022

Discovered

Jun 15, 2022

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed739 affectedView incident

Name: UW Medicine (UW Medical Center - Northwest Campus)
norm: uw medicine uw medical center northwest campus
Domain: uwmedicine.org

Name: UW Medicine (UW Medical Center - Northwest Campus)
norm: uw medicine uw medical center northwest campus
Domain: uwmedicine.org
Industry: Healthcarellm

Discovered: Apr 18, 2022
Breach occurred: Apr 16, 2022
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 10, 2022
Affected individuals: 739state-resident count only
Data types: PHIHealth (basic)Identity (basic)
Data elements: NameDate of birthMedical information
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle 1-99dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Reported to the U.S. Department of Health and Human Services Office of Civil Rights

During the incident: Filed a report with Seattle Police Department (SPD)
Reported this incident to the U.S. Department of Health and Human Services Office of Civil Rights
Changes made: Reviewing internal protocols and procedures to prevent this from happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA12056.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 15, 2022
Raw hash: 4ebb3293355ada17f45ca35cf6aa466128768f49ccd0f3e48599b7571d01a2f7

Reporting entityUW Medicine (UW Medical Center - Northwest Campus)

Victim entityUW Medicine (UW Medical Center - Northwest Campus)

Incidentdiscovered Apr 18, 2022

Stated responseFiled a report with Seattle Police Department (SPD)

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com