Western Washington Medical Group

Western Washington Medical Group notified patients of a network security incident on August 26, 2023, where an unauthorized party gained access to the network. Personal information including names, SSNs, DOBs, and PHI was potentially accessed. WWMG secured the network, engaged forensic investigators, and offered credit monitoring.

Western Washington Medical Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-08. 100 Massachusetts residents were affected. The report records the breach type as electronic.

Western Washington Medical Group reported a ransomware cyberattack occurring between July 7 and August 26, 2023, discovered on September 25, 2023. The incident potentially exposed patient PII (names, SSNs, DOBs) and PHI (medical records, diagnoses) for 334,360 individuals. The company engaged forensic investigators, secured the network, and offered credit monitoring.

Western Washington Medical Group experienced a network security incident on August 26, 2023, involving unauthorized access to its network environment. The breach window is identified as July 7, 2023, to August 26, 2023. Affected data may include names, addresses, Social Security numbers, dates of birth, medical record numbers, health insurance policy numbers, and medical history. The organization contained the incident by shutting off network access and engaged third-party forensic investigators. Complimentary identity monitoring services were offered to affected individuals.

Western Washington Medical Group reported to HHS on 2023-10-26 a Hacking/IT Incident affecting 350,863 individuals. Breached information located on Network Server. The incident involved a ransomware attack exposing PHI including names, addresses, SSNs, DOBs, claims, and diagnoses.

Western Washington Medical Group Inc. reported to HHS on 2018-01-12 a Improper Disposal affecting 842 individuals. Breached information located on Paper/Films. A janitorial service comingled shredded PHI with regular trash, exposing patient names, addresses, birthdates, and medical data. The entity provided breach notification, identity theft protection, and retrained staff.