Spokane Digestive Disease Center Data Breach Exposes Sensitive Patient Information
Spokane Digestive Disease Center, P.S., a gastroenterology and internal medicine practice in Spokane, Washington, disclosed a data breach affecting at least 2,093 individuals. The incident was detected on February 19, 2026, after suspicious activity was identified in an employee’s email account.
An investigation revealed that an unauthorized actor accessed the account between January 22 and February 18, 2026, compromising sensitive patient data. Exposed information includes names, Social Security numbers, driver’s license or Washington ID numbers, financial and banking details, dates of birth, and medical records. The practice secured the affected system and launched a review to assess the scope of the breach.
Class action law firm Shamis & Gentile P.A. is investigating potential legal claims on behalf of affected individuals, citing possible compensation for damages such as lost time, emotional distress, or out-of-pocket expenses. The breach underscores ongoing risks to healthcare data security, particularly in smaller medical practices.
Source: https://www.claimdepot.com/investigations/spokane-digestive-disease-center-data-breach-2026
Spokane Digestive Disease Center cybersecurity rating report: https://www.rankiteo.com/company/spokane-digestive
"id": "SPO1780936519",
"linkid": "spokane-digestive",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '2,093',
'industry': 'Healthcare',
'location': 'Spokane, Washington',
'name': 'Spokane Digestive Disease Center, P.S.',
'type': 'Healthcare Provider'}],
'attack_vector': 'Compromised Email Account',
'data_breach': {'number_of_records_exposed': '2,093',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Driver’s license or '
'Washington ID '
'numbers',
'Dates of birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Financial Information',
'Medical Records']},
'date_detected': '2026-02-19',
'description': 'Spokane Digestive Disease Center, P.S., a gastroenterology '
'and internal medicine practice in Spokane, Washington, '
'disclosed a data breach affecting at least 2,093 individuals. '
'The incident was detected after suspicious activity was '
'identified in an employee’s email account, leading to '
'unauthorized access and compromise of sensitive patient data.',
'impact': {'data_compromised': 'Sensitive patient information including '
'names, Social Security numbers, driver’s '
'license or Washington ID numbers, financial '
'and banking details, dates of birth, and '
'medical records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential legal claims being investigated by '
'Shamis & Gentile P.A.',
'payment_information_risk': 'High',
'systems_affected': 'Employee email account'},
'initial_access_broker': {'entry_point': 'Employee email account',
'reconnaissance_period': '2026-01-22 to 2026-02-18'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Class action law firm Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Potential legal claims being '
'investigated by Shamis & Gentile '
'P.A.'},
'response': {'containment_measures': 'Secured the affected system',
'remediation_measures': 'Launched a review to assess the scope '
'of the breach'},
'threat_actor': 'Unauthorized Actor',
'title': 'Spokane Digestive Disease Center Data Breach Exposes Sensitive '
'Patient Information',
'type': 'Data Breach'}