Fred Hutchinson Cancer Center
Disclosed Dec 20, 20232 years ago1,840,927 affectedConfirmed
Hackers steal patient files from Fred Hutch clinical network
Fred Hutch detected unauthorized activity on its clinical network on November 19, 2023 and found that files were taken. Affected files included patient names, contact details, dates of birth, Social Security numbers, insurance and some clinical information; its electronic medical record system was not involved.
What is known
| People affected | 1,840,927 (as reported to HHS) |
|---|---|
| Disclosed | Dec 20, 2023 |
| Discovered | Oct 27, 2023 |
| Happened | Nov 19, 2023 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Phone numbers, Emails, Dates of birth, Social Security numbers, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Fred Hutchinson Cancer Centeroag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Fred Hutchinson Cancer Centeratg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Fred Hutchinson Cancer Centerjustice.oregon.gov · Official notice | Official notice |
| California AG data breach notice: Fred Hutchinson Cancer Centeroag.ca.gov · Regulator | Regulator |
| Vermont Attorney General: 2023-12-20 Fred Hutchinson Cancer Center Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Fred Hutchinson Cancer Centerin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Fred Hutchinson Cancer Center (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Dec 20, 2023 | |
| Indiana AGresidents of IN | Dec 20, 2023 | 32 |
| California AGresidents of CA | Dec 22, 2023 | |
| Washington AGresidents of WA | Dec 22, 2023 | 1,694,184 |
| Oregon DOJresidents of OR | Dec 22, 2023 | 339,469 |
| Researchtotal | Dec 22, 2023 | |
| HHS archivetotal | Dec 22, 2023 | 1,840,927 |
| HHS archivetotal | Dec 26, 2023 | 20,192 |
| Washington AGresidents of WA | Feb 29, 2024 | 14,898 |
Other breaches at Fred Hutchinson Cancer Center
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed May 25, 2022May 25, 20224 years agoHacking | May 25, 20224 years ago | Hacking | Healthcare | Confirmed | 89K |
History of this record
- 2026-09-25 · records: 20192 to 1840927 · backfill source
- 2026-09-25 · source: empty to https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 554 to 20192 · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 554 · backfill source
- 2026-09-25 · disclosed: 2023-12-22 to 2023-12-20 · backfill source
- 2026-09-25 · attack: lost-device to hacking · seed source
- 2026-09-25 · data_types: [] to ["names","addresses","phone","emails","dob","ssn","health","insurance"] · seed source
- 2026-09-25 · summary: empty to Fred Hutch detected unauthorized activity on its clinical network on November 19, 2023 and found that files were taken. Affected files included patient names, contact details, dates of birth, Social Security numbers, insurance and some clin · seed source
- 2026-09-25 · title: empty to Hackers steal patient files from Fred Hutch clinical network · seed source
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · discovered: empty to 2023-10-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.