King County Public Hospital District No. 2
Disclosed Jul 13, 20215 years ago22,579 affectedConfirmed
The covered entity (CE), King County Public Hospital District No. 2 dba EvergreenHealth, reported that is business associate suffered a ransomware attack affecting the protected health information (PHI) of 20,533 individuals. The PHI involved included names, diagnoses, medications prescribed, dates of birth, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional technical safeguards to better protected its PHI.
What is known
| People affected | 22,579 (as reported to HHS) |
|---|---|
| Disclosed | Jul 13, 2021 |
| Discovered | Mar 1, 2022 |
| Happened | Dec 4, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: King County Public Hospital District No. 2atg.wa.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): King County Public Hospital District No. 2 (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 13, 2021 | 22,579 |
| Washington AGresidents of WA | Apr 22, 2022 | 19,092 |
| HHS archivetotal | Apr 22, 2022 | 20,533 |
History of this record
- 2026-09-25 · records: 20533 to 22579 · backfill source
- 2026-09-25 · disclosed: 2022-04-22 to 2021-07-13 · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 20533 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), King County Public Hospital District No. 2 dba EvergreenHealth, reported that is business associate suffered a ransomware attack affecting the protected health information (PHI) of 20,533 individuals. The PHI involv · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.