Fred Hutchinson Cancer Center

Disclosed Dec 20, 20231,840,927 affectedConfirmed

Hackers steal patient files from Fred Hutch clinical network

Fred Hutch detected unauthorized activity on its clinical network on November 19, 2023 and found that files were taken. Affected files included patient names, contact details, dates of birth, Social Security numbers, insurance and some clinical information; its electronic medical record system was not involved.

What is known

People affected	1,840,927 (as reported to HHS)
Disclosed	Dec 20, 2023
Discovered	Oct 27, 2023
Happened	Nov 19, 2023
Attack	Hacking
Data exposed	NamesAddressesPhone numbersEmailsDates of birthSocial Security numbersHealthInsurance
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Fred Hutchinson Cancer Center

Official noticeatg.wa.gov

Washington Attorney General breach notice: Fred Hutchinson Cancer Center

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Fred Hutchinson Cancer Center

Regulatoroag.ca.gov

California AG data breach notice: Fred Hutchinson Cancer Center

Official noticeago.vermont.gov

Vermont Attorney General: 2023-12-20 Fred Hutchinson Cancer Center Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2024 data breach report: Fred Hutchinson Cancer Center

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Fred Hutchinson Cancer Center (Healthcare Provider, WA)

Notices filed

Residents of VTDec 20, 2023

Vermont AGCount not stated

Residents of INDec 20, 2023

Indiana AG32 people

Residents of CADec 22, 2023

California AGCount not stated

Residents of WADec 22, 2023

Washington AG1,694,184 people

Residents of ORDec 22, 2023

Oregon DOJ339,469 people

TotalDec 22, 2023

ResearchCount not stated

TotalDec 22, 2023

HHS archive1,840,927 people

TotalDec 26, 2023

HHS archive20,192 people

Residents of WAFeb 29, 2024

Washington AG14,898 people

Other breaches at Fred Hutchinson Cancer Center

Hacking breachHacking exposed names and health records. Reported to the California AG.89K affectedHealthcareUSMay 25, 2022

History of this record

records2026-09-25

20192 to 1840927by backfillSource

source2026-09-25

empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsfby backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

554 to 20192by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 554by backfillSource

disclosed2026-09-25

2023-12-22 to 2023-12-20by backfillSource

attack2026-09-25

lost-device to hackingby seedSource

data_types2026-09-25

[] to ["names","addresses","phone","emails","dob","ssn","health","insurance"]by seedSource

summary2026-09-25

empty to Fred Hutch detected unauthorized activity on its clinical network on November 19, 2023 and found that files were taken. Affected files included patient names, contact details, dates of birth, Social Security numbers, insurance and some clinby seedSource

title2026-09-25

empty to Hackers steal patient files from Fred Hutch clinical networkby seedSource

attack2026-09-25

unknown to lost-deviceby backfillSource

discovered2026-09-25

empty to 2023-10-27by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Fred Hutchinson Cancer Center