Grays Harbor Community Hospital

Grays Harbor Community Hospital (GHCH) notified the Washington AG of a ransomware attack on its mail-processing vendor, Metro Presort, Inc. (MPI). The attack occurred May 6-15, 2019. GHCH was notified by MPI on Nov 29, 2020. Patient data (names, DOB, health plan IDs, treatment dates) was potentially accessible. ~5,136 patients affected. No evidence of actual improper access. OCR investigated and closed in Dec 2020.

Grays Harbor Community Hospital experienced a ransomware incident on June 15, 2019. Databases containing electronic medical records were encrypted. The organization notified the FBI and engaged forensic consultants. Approximately 88,000 Washington residents were affected. Data types included PHI, SSN, DOB, and names. No data exfiltration was confirmed.

Grays Harbor Community Hospital reported a ransomware attack to HHS on August 12, 2019, affecting 88,399 individuals. The breach compromised patient data including names, addresses, Social Security numbers, and clinical information stored on its network server and electronic medical records. The hospital responded by implementing additional administrative and technical safeguards.