Hi-School Pharmacy
Disclosed Dec 5, 20232 years ago12,779 affectedConfirmed
Hi-School Pharmacy, the covered entity (CE), reported that it experienced a cyber-attack which compromised the protected health information (PHI) of 12,779 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, medications, and prescription information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach and OCR’s investigation, the CE revised its policies and procedures, retrained its workforce members, and implemented additional technical safeguards.
What is known
| People affected | 12,779 (as reported to HHS) |
|---|---|
| Disclosed | Dec 5, 2023 |
| Discovered | Nov 21, 2023 |
| Happened | Nov 2, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Hi-School Pharmacyatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Hi-School Pharmacyjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Hi-School Pharmacy (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 5, 2023 | 12,779 |
| Washington AGresidents of WA | Dec 6, 2023 | 3,695 |
| Oregon DOJresidents of OR | Dec 6, 2023 | 17,676 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 12779 · backfill source
- 2026-09-25 · disclosed: 2023-12-06 to 2023-12-05 · backfill source
- 2026-09-25 · summary: empty to Hi-School Pharmacy, the covered entity (CE), reported that it experienced a cyber-attack which compromised the protected health information (PHI) of 12,779 individuals. The PHI involved included names, addresses, dates of birth, Social Secu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.