Breachesby GlyphSeattle Children's Hospital
Disclosed Sep 21, 20226,320 affectedConfirmed
The covered entity (CE), UCLA Health, reported that analytic tools on its website may have transmitted the protected health information (PHI) of 94,000 individuals to its service providers. The PHI involved included names, dates of birth, and other identifiers. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the CE strengthened its administrative and technical safeguards to better protect its PHI. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 6,320 (as reported to HHS) |
|---|---|
| Disclosed | Sep 21, 2022 |
| Discovered | Jun 30, 2022 |
| Happened | May 18, 2022 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 6320by backfillSource
empty to The covered entity (CE), UCLA Health, reported that analytic tools on its website may have transmitted the protected health information (PHI) of 94,000 individuals to its service providers. The PHI involved included names, dates of birth, aby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.