Virginia Mason Medical Center

Virginia Mason Medical Center (WA) reported to HHS OCR on 2022-05-31 a Hacking/IT Incident (cyber-attack) affecting 1,523 individuals. PHI on a Network Server was compromised, including names, addresses, birthdates, Social Security numbers, email addresses, and claims and treatment information. The CE notified HHS, affected individuals, and the media, and implemented additional administrative, technical, and security safeguards.

Virginia Mason Medical Center reported to HHS on 2022-03-14 a Hacking/IT Incident affecting 2733 individuals. Breached information located on Email. Employees were victims of an email phishing attack exposing PHI including names, SSNs, addresses, driver's license numbers, DOB, lab results, medications, and financial information. The entity notified HHS, individuals, and media, strengthened safeguards, and retrained staff.

Virginia Mason Medical Center, a health sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2022-01-18 and filed notice on 2022-02-18. 3,000 Washington residents were affected. 31 days elapsed between awareness and notification. 28 days to identify the breach. 0 days to contain the breach.

Virginia Mason Medical Center, a health sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2020-07-16 and filed notice on 2020-09-08. 227,371 Washington residents were affected. 54 days elapsed between awareness and notification. 160 days to identify the breach. 0 days to contain the breach.

Virginia Mason Medical Center (WA) reported to HHS on 2020-09-08 that its business associate experienced a ransomware attack affecting the ePHI of approximately 244,761 individuals. Breached information was located on a Network Server. Exposed data included names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.