Providence

Providence reported unauthorized access and sharing of patient data via Health Gorilla HIE between Aug 2024 and Dec 2025. Discovered Feb 11, 2026. 838 WA residents affected. Data included names, DOB, addresses, insurance, and clinical records. No SSNs involved. Providence is offering 1 year of identity protection.

Providence notified patients of a data breach involving Health Gorilla, a health information network connected to Providence's Epic EHR system. Between August 30, 2024, and December 8, 2025, patient health information may have been accessed or shared by HIE participants without a defined business need. Providence was notified of the issue on February 11, 2026. Affected data includes names, dates of birth, addresses, insurance policy numbers, test results, medications, and diagnoses. Social Security numbers were not involved. Providence is reviewing data-sharing practices and offering one year of identity protection services.

Providence reported to HHS on 2026-01-16 a Hacking/IT Incident affecting 22701 individuals. Breached information located on Network Server. Business Associate was present.

Providence St. Joseph Health notified Montana residents that an internal caregiver accessed electronic medical information in violation of policy between March 21 and April 19, 2022. The incident was discovered on July 19, 2022. Data exposed included PHI and basic PII; no SSN or financial data was involved. Corrective action was taken.