PROVAIL

Disclosed Aug 8, 20254,908 affectedConfirmed

PROVAIL, the covered entity (CE), reported unauthorized access to its network containing the protected health information (PHI) of 4,908 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.

What is known

People affected	4,908 (as reported to HHS)
Disclosed	Aug 8, 2025
Discovered	Jun 8, 2025
Happened	Jun 7, 2025
Attack	Ransomware
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: PROVAIL

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): PROVAIL (Healthcare Provider, WA)

Notices filed

TotalAug 8, 2025

HHS archive4,908 people

Residents of WAJan 16

Washington AG4,391 people

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 4908by backfillSource

disclosed2026-09-25

2026-01-16 to 2025-08-08by backfillSource

summary2026-09-25

empty to PROVAIL, the covered entity (CE), reported unauthorized access to its network containing the protected health information (PHI) of 4,908 individuals. The PHI involved included clinical, demographic, and financial information. The CE notifieby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about PROVAIL