Country Doctor Community Health Clinic

The Washington State Office of the Attorney General disclosed a data breach affecting Country Doctor Community Health Clinic in October 2022, initially detected on January 6, 2022. The incident involved unauthorized access to systems, compromising the personal and protected health information (PHI) of 21,600 Washington residents. Exposed data included highly sensitive details such as names, Social Security numbers, and medical records, posing significant risks of identity theft, financial fraud, and privacy violations. The breach targeted a healthcare provider, amplifying concerns due to the sensitive nature of health data and the potential for long-term harm to affected individuals. While the exact method of intrusion (e.g., phishing, exploit of vulnerabilities) was not specified, the scale and type of data accessed suggest a deliberate cyber attack aimed at extracting valuable personal information. The clinic likely faced regulatory scrutiny (e.g., HIPAA violations), reputational damage, and potential legal liabilities, alongside the obligation to notify victims and implement remediation measures.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=13950

TPRM report: https://www.rankiteo.com/company/seattlerootsch

"id": "sea1018090725",
"linkid": "seattlerootsch",
"type": "Breach",
"date": "1/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '21,600',
                        'industry': 'Healthcare',
                        'location': 'Washington, USA',
                        'name': 'Country Doctor Community Health Clinic',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'data_exfiltration': 'Potential (unauthorized access '
                                      'confirmed)',
                 'number_of_records_exposed': '21,600',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2022-01-06',
 'date_publicly_disclosed': '2022-10-19',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Country Doctor Community Health '
                'Clinic. The breach involved unauthorized access and '
                'potentially affected the personal and protected health '
                'information of 21,600 Washington residents, including names, '
                'Social Security numbers, and medical information.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'medical information'],
            'identity_theft_risk': 'High (PII and PHI exposed)'},
 'references': [{'date_accessed': '2022-10-19',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['HIPAA (likely)'],
                           'regulatory_notifications': 'Washington State '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via Washington '
                                        'State Office of the Attorney General'},
 'title': 'Data Breach at Country Doctor Community Health Clinic',
 'type': 'Data Breach'}