Klickitat Valley Health

Disclosed Mar 14, 202526,339 affectedConfirmed

The covered entity (CE), Klickitat Valley Health, reported that it experienced a ransomware incident that affected the electronic protected health information (ePHI) of 26,339 individuals. The PHI involved clinical, demographic, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.

What is known

People affected	26,339 (as reported to HHS)
Disclosed	Mar 14, 2025
Discovered	Feb 23, 2025
Happened	Feb 18, 2025
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: Klickitat Valley Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Klickitat Valley Health (Healthcare Provider, WA)

Notices filed

Residents of WAMar 14, 2025

Washington AG11,960 people

TotalMar 14, 2025

HHS archive26,339 people

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 26339by backfillSource

summary2026-09-25

empty to The covered entity (CE), Klickitat Valley Health, reported that it experienced a ransomware incident that affected the electronic protected health information (ePHI) of 26,339 individuals. The PHI involved clinical, demographic, and financiby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about Klickitat Valley Health