Seattle Children's Hospital
Disclosed Sep 21, 20224 years ago6,320 affectedConfirmed
The covered entity (CE), UCLA Health, reported that analytic tools on its website may have transmitted the protected health information (PHI) of 94,000 individuals to its service providers. The PHI involved included names, dates of birth, and other identifiers. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the CE strengthened its administrative and technical safeguards to better protect its PHI. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 6,320 (as reported to HHS) |
|---|---|
| Disclosed | Sep 21, 2022 |
| Discovered | Jun 30, 2022 |
| Happened | May 18, 2022 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Seattle Children's Hospitalatg.wa.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Seattle Children's Hospital (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Sep 21, 2022 | 6,240 |
| HHS archivetotal | Sep 21, 2022 | 6,320 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 6320 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), UCLA Health, reported that analytic tools on its website may have transmitted the protected health information (PHI) of 94,000 individuals to its service providers. The PHI involved included names, dates of birth, a · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.