Swedish Health Services

The Washington State Office of the Attorney General disclosed a data breach affecting Swedish Health Services in May 2020, initially detected on January 15, 2020. The incident involved unauthorized access to systems, leading to the compromise of personal information belonging to 12,573 residents. The exposed data included highly sensitive details such as names, Social Security numbers, and full dates of birth, which significantly heighten the risk of identity theft, financial fraud, and long-term reputational harm for the affected individuals. As a healthcare provider, the breach underscores critical vulnerabilities in safeguarding patient data, potentially eroding trust in the organization’s ability to protect confidential information. The delayed public disclosure (nearly five months after discovery) may further exacerbate regulatory scrutiny and legal repercussions under data protection laws like HIPAA or state-level breach notification statutes.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10554

TPRM report: https://www.rankiteo.com/company/shs-swedish-health-services

"id": "shs019091825",
"linkid": "shs-swedish-health-services",
"type": "Breach",
"date": "12/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '12,573',
                        'industry': 'Healthcare',
                        'location': 'Washington, USA',
                        'name': 'Swedish Health Services',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'number_of_records_exposed': '12,573',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers',
                                                         'full dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2020-01-15',
 'date_publicly_disclosed': '2020-05-29',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Swedish Health Services. The breach, '
                'discovered on January 15, 2020, involved unauthorized access '
                'that compromised the personal information of approximately '
                '12,573 residents, including names, Social Security numbers, '
                'and full dates of birth.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'full dates of birth'],
            'identity_theft_risk': 'High'},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'Swedish Health Services Data Breach (2020)',
 'type': 'Data Breach'}