UW Medicine

UW Medicine (WA), a healthcare provider, reported to HHS on 2022-09-21 a Hacking/IT Incident affecting 3,804 individuals. A cyber-attack on UW Medicine's business associate compromised PHI including names, addresses, claims and financial information, medical record numbers, and treatment information stored on a Network Server. The covered entity and BA notified HHS, affected individuals, and the media. Mitigation included complimentary credit monitoring and additional administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Rules.

UW Medicine (WA) reported to HHS on 2022-06-15 a Theft affecting 763 individuals. The covered entity's office was burglarized and a laptop containing PHI was stolen. PHI involved included names, dates of birth, diagnoses, and other treatment information. Breached information located on Laptop. The CE notified HHS, affected individuals, the media, and provided substitute notice. Additional safeguards were implemented and staff were retrained.

UW Medicine (WA) reported to HHS on 2021-06-04 a Hacking/IT Incident affecting 18,389 individuals. A business associate experienced a ransomware attack impacting ePHI stored on a Network Server. Exposed data included names, dates of birth, and medications prescribed. UW Medicine notified HHS, affected individuals, the media, and provided substitute notice. In response, the CE implemented additional technical safeguards and retrained staff.