Country Doctor Community Health Clinic
Disclosed Sep 16, 20224 years ago22,727 affectedConfirmed
The covered entity (CE), Country Doctor Community Health Clinic, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 22,120 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, medical record numbers, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE provided complimentary credit monitoring services to affected individuals and implemented additional technical safeguards.
What is known
| People affected | 22,727 (as reported by the organization) |
|---|---|
| Disclosed | Sep 16, 2022 |
| Discovered | Jan 6, 2022 |
| Happened | Oct 14, 2022 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Country Doctor Community Health Clinicatg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2022 10 19 Country Doctor Community Health Clinic Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Country Doctor Community Health Clinicin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Country Doctor Community Health Clinic (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 16, 2022 | 22,120 |
| Washington AGresidents of WA | Oct 19, 2022 | 21,600 |
| Vermont AGresidents of VT | Oct 19, 2022 | |
| Indiana AGresidents of IN | Oct 19, 2022 | 12 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2022-10-19 to 2022-09-16 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Country Doctor Community Health Clinic, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 22,120 individuals. The PHI involved included names, dates of birth, · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 22727 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2022-10-19-country-doctor-community-health-clinic-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.