Kootenai Health
Disclosed Apr 24, 20242 years ago464,088 affectedConfirmed
The covered entity (CE), Kootenai Health reported that an unauthorized individual gained access to its system and compromised the protected health information (PHI) of 464,088 individuals. The type of PHI involved included clinical, demographic, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 464,088 (as reported by the organization) |
|---|---|
| Disclosed | Apr 24, 2024 |
| Discovered | Mar 2, 2024 |
| Happened | Feb 22, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Kootenai Healthoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Kootenai Healthatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Kootenai Healthjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Kootenai Healthin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Kootenai Health (Healthcare Provider, ID)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 24, 2024 | 464,088 |
| California AGresidents of CA | Aug 12, 2024 | |
| Indiana AGresidents of IN | Aug 12, 2024 | 303 |
| Washington AGresidents of WA | Aug 13, 2024 | 94,530 |
| Oregon DOJresidents of OR | Aug 13, 2024 | 464,088 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2024-08-12 to 2024-04-24 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Kootenai Health reported that an unauthorized individual gained access to its system and compromised the protected health information (PHI) of 464,088 individuals. The type of PHI involved included clinical, demogra · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 464088 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-03-02 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.