Health & Wellness Clinic
Disclosed Oct 13, 20205 years ago883 affectedConfirmed
The covered entity (CE), Health and Wellness Clinic, PLLC, reported its storage unit was burglarized and paper medical records were stolen. This breach incident affected 883 individuals. The protected health information (PHI) involved included names, addresses, birthdates, drivers’ license numbers, Social Security numbers, clinical information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement. An arrest was also made. Following the breach, the CE improved physical safeguards at its facility and providing free credit monitoring to affected individuals.
What is known
| People affected | 883 (as reported to HHS) |
|---|---|
| Disclosed | Oct 13, 2020 |
| Discovered | Aug 31, 2020 |
| Happened | Aug 29, 2020 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Health & Wellness Clinicatg.wa.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Health and Wellness Clinic (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 13, 2020 | 883 |
| Washington AGresidents of WA | Oct 16, 2020 | 889 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 883 · backfill source
- 2026-09-25 · disclosed: 2020-10-16 to 2020-10-13 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Health and Wellness Clinic, PLLC, reported its storage unit was burglarized and paper medical records were stolen. This breach incident affected 883 individuals. The protected health information (PHI) involved inclu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.