Community Psychiatric Clinic
Disclosed Jul 27, 20197 years ago5,866 affectedConfirmed
The covered entity (CE), Community Psychiatric Clinic, reported that it was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 5,866 individuals. The ePHI involved included names, Social Security numbers, addresses, birthdates, diagnoses/conditions, lab results, medications prescribed, claims information, and financial data. The CE notified HHS, affected individuals, and the media. After OCR’s investigation, the CE retrained its workforce members on the proper methods of identifying fraudulent email communications and implemented additional technical safeguards. OCR obtained assurances that the CE implemented the corrective actions noted.
What is known
| People affected | 5,866 (as reported to HHS) |
|---|---|
| Disclosed | Jul 27, 2019 |
| Discovered | Mar 12, 2019 |
| Happened | Mar 12, 2019 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Community Psychiatric Clinicatg.wa.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Community Psychiatric Clinic (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Jul 27, 2019 | 6,600 |
| HHS archivetotal | Aug 15, 2019 | 5,866 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 5866 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Community Psychiatric Clinic, reported that it was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 5,866 individuals. The ePHI involved included names, Soci · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.