Fred Hutchinson Cancer Center

FRED HUTCHINSON CANCER CENTER filed a data-breach notice with the Illinois Attorney General in August 2024 (case 24-08-025). The register records the breach as discovered on November 19, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Fred Hutchinson Cancer Center reported a breach in Washington state involving the theft or mistake of patient records. The incident occurred on October 27, 2023, affecting 14,898 Washington residents. Data types include PII and government identifiers. No specific attack vector or malware family was identified in the filing.

Fred Hutchinson Cancer Center notified individuals of a data security incident on October 27, 2023, after a provider lost a personal laptop. The laptop was password protected and remotely wiped; no evidence of data access was found. Affected data included names, SSNs, addresses, DOBs, and medical records. The Center offered credit monitoring and re-educated staff on device security.

Fred Hutchinson Cancer Center (WA) reported to HHS on 2023-12-26 a Loss affecting 20,192 individuals. A laptop containing PHI was lost or stolen from an employee during travel. PHI exposed included names, addresses, dates of birth, Social Security numbers, diagnoses, medications, and lab results. The CE notified HHS, affected individuals, and media; provided substitute notice and complimentary credit monitoring; and implemented additional safeguards with staff retraining.

Fred Hutchinson Cancer Center reported a data breach to the Oregon Attorney General. The breach was reported on 2023-12-22. The breach occurred during 11/19/2023 - 11/25/2023. The breach was discovered on 11/19/2023. 339,469 individuals were affected. Notice was sent on 12/20/2023.

Fred Hutchinson Cancer Center detected unauthorized activity on its clinical network on November 19, 2023. An unauthorized third party accessed the network and obtained files containing patient information, including names, addresses, SSNs, and health insurance details, between November 19 and November 25, 2023. The organization contained the activity, engaged forensic investigators, and is offering identity protection services to affected individuals.

Fred Hutchinson Cancer Center notified Montana residents of a data security incident where unauthorized third parties accessed clinical network files between Nov 19-25, 2023. Affected data included names, SSNs, DOBs, PHI, and financial info. The company engaged forensic investigators and offered credit monitoring.

Fred Hutchinson Cancer Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-22. 277 Massachusetts residents were affected. The report records the breach type as electronic.

Fred Hutchinson Cancer Center reported to HHS on 2023-12-22 a Hacking/IT Incident affecting 1,840,927 individuals. Breached information located on Network Server.

Fred Hutchinson Cancer Center disclosed a cyberattack on November 19, 2023, affecting up to 1.69 million individuals. Unauthorized access to clinical networks occurred between Nov 19-25, 2023, exposing PHI, SSNs, and financial data. Notifications began Dec 20, 2023, with credit monitoring offered.

Fred Hutchinson Cancer Center detected unauthorized activity on its clinical network on November 19, 2023. An investigation determined that an unauthorized third party accessed the network and obtained files between November 19 and November 25, 2023. Affected data included names, addresses, SSNs, health insurance info, and clinical records. The organization contained the activity, engaged forensic investigators, and offered identity protection services.

Fred Hutchinson Cancer Center reported a data breach to the Indiana Attorney General. The breach occurred on 2023-11-19 and was reported on 2023-12-20. 32 Indiana residents were affected. 554 individuals affected in total.

Country : United States of America - Exfiltraded data : yes - Encrypted data : no

Country : United States of America - Exfiltraded data : yes - Encrypted data : no

Fred Hutchinson Cancer Center reported a data breach to the Oregon Attorney General. The breach was reported on 2022-10-21. The breach occurred during 3/25/2022 - 3/26/2022. The breach was discovered on 3/26/20229/9/2022. 89,111 individuals were affected. Notice was sent on 5/25/202210/20/2022.

Fred Hutchinson Cancer Center discovered unauthorized access to a single employee's business email account on March 26, 2022. The attacker accessed the account between March 25 and March 26, 2022. The incident involved personal and potentially protected health information of patients and individuals. The organization contained the account, engaged forensic investigators, and notified law enforcement. Affected individuals were offered one year of complimentary identity monitoring.

Fred Hutchinson Cancer Center notified Montana residents of a data security incident where an unauthorized third party accessed an employee's email account from March 25-26, 2022. The breach exposed protected health information and personal data. The incident was discovered on March 26, 2022, and affected individuals were offered one year of Experian IdentityWorks.

Fred Hutchinson Cancer Center reported a supplemental breach affecting 79,814 Washington residents. An unauthorized third party accessed an employee's email account between March 25-26, 2022, likely via phishing. Data included PHI, SSNs, and financial info. Notices mailed Oct 21, 2022.

Fred Hutchinson Cancer Center reported to HHS on 2022-05-25 a Hacking/IT Incident affecting 89,111 individuals. Breached information located on Email. An employee was the subject of an email phishing scheme that compromised PHI including names, addresses, DOB, SSN, driver's license, passport, claims, and treatment info. The CE provided credit monitoring and implemented safeguards.