Northwest Medical Homes
Disclosed Jul 13, 20251 year ago500 affectedConfirmed
The covered entity (CE), Northwest Medical Homes, reported that it was the target of a hacking attack that compromised the protected health information (PHI) of approximately 98,527 individuals. The PHI involved demographic and clinical information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE enhanced its access controls and strengthened its threat detection and response solutions to better protect its PHI. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 500 (as reported to HHS) |
|---|---|
| Disclosed | Jul 13, 2025 |
| Discovered | May 13, 2025 |
| Happened | Mar 19, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Northwest Medical Homesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Northwest Medical Homesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Northwest Medical Homesjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2026-02-26 Northwest Medical Homes Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Northwest Medical Homes (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 13, 2025 | 500 |
| Vermont AGresidents of VT | Feb 26 | |
| California AGresidents of CA | Mar 5 | |
| Washington AGresidents of WA | Mar 5 | 517 |
| Oregon DOJresidents of OR | Mar 5 | 98,527 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 500 · backfill source
- 2026-09-25 · disclosed: 2026-02-26 to 2025-07-13 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Northwest Medical Homes, reported that it was the target of a hacking attack that compromised the protected health information (PHI) of approximately 98,527 individuals. The PHI involved demographic and clinical inf · backfill source
- 2026-09-25 · disclosed: 2026-03-05 to 2026-02-26 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-05-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.