Advarra

Disclosed Feb 2, 2024596 affectedConfirmed

The business associate (BA), Advarra, reported that it experienced a hacking attack of an employee’s email account which compromised the protected health information (PHI) of 596 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, financial information, and treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring and implemented additional administrative, technical, and security safeguards. Staff were retrained to better protect sensitive data.

What is known

People affected	596 (as reported to HHS)
Disclosed	Feb 2, 2024
Discovered	Oct 30, 2023
Happened	Oct 25, 2023
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: Advarra

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Advarra (Business Associate, MD)

Notices filed

Residents of WAFeb 2, 2024

Washington AG1,066 people

TotalApr 19, 2024

HHS archive596 people

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 596by backfillSource

summary2026-09-25

empty to The business associate (BA), Advarra, reported that it experienced a hacking attack of an employee’s email account which compromised the protected health information (PHI) of 596 individuals. The PHI involved included names, dates of birth,by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Advarra