PROVAIL

PROVAIL, a healthcare entity, disclosed a ransomware incident affecting 4,391 Washington residents. Unauthorized access occurred June 7-9, 2025, discovered June 8, 2025. Exposed data included names, SSNs, driver's licenses, financial accounts, PHI, biometrics, and passwords. PROVAIL secured systems, notified law enforcement, and offered 12 months of credit monitoring.

PROVAIL filed a data-breach notice with the Illinois Attorney General in January 2026 (case 26-01-735). The register records the breach as discovered on December 18, 2025. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

PROVAIL (Washington state Healthcare Provider) reported to HHS OCR on 2025-08-08 a Hacking/IT Incident affecting 501 individuals. Breached information was located on a Network Server. No business associate was identified as involved. No further detail is available in the public HHS disclosure.

PROVAIL is one of Washington State's largest, multi-service agencies dedicated to meeting the needs of children, youth, and adults with disabilities who need an integrated, complex set of services to live life according to their own choices. Serving primarily King and Snohomish Counties, PROVAIL offers a comprehensive range of services to support people, with even the most severe disabilities, in all major areas of life so they can live, work, play, and fully participate in the community of their choice.