Peoples Injury Network Northwest
Disclosed Sep 12, 20197 years ago27,000 affectedConfirmed
Peoples Injury Network Northwest, the covered entity (CE), reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 27,000 individuals. The ePHI involved included names, addresses, birthdates, drivers’ license information, diagnoses, clinical information and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. Affected individuals were provided with complimentary credit monitoring services. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards and retrained its staff. OCR provided technical assistance to the CE.
What is known
| People affected | 27,000 (as reported to HHS) |
|---|---|
| Disclosed | Sep 12, 2019 |
| Discovered | Apr 23, 2019 |
| Happened | Apr 22, 2019 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Peoples Injury Network Northwestatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Peoples Injury Network Northwestjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2019 data breach report: Peoples Injury Network Northwestin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Peoples Injury Network Northwest (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Sep 12, 2019 | 12,502 |
| Oregon DOJresidents of OR | Sep 12, 2019 | 13,269 |
| Indiana AGresidents of IN | Sep 12, 2019 | 3 |
| HHS archivetotal | Sep 12, 2019 | 27,000 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 13269 to 27000 · backfill source
- 2026-09-25 · summary: empty to Peoples Injury Network Northwest, the covered entity (CE), reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 27,000 individuals. The ePHI involved included names, addr · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 13269 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.