Southwest Healthcare Services
Disclosed Mar 31, 20233 years ago15,996 affectedConfirmed
The entity (CE), Southwest Healthcare Services, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 15,996 individuals. The PHI involved clinical, financial, and demographic information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 15,996 (as reported to HHS) |
|---|---|
| Disclosed | Mar 31, 2023 |
| Discovered | Oct 30, 2022 |
| Happened | Oct 28, 2022 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: Southwest Healthcare Servicesatg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-03-31 Southwest Healthcare Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-03-31 Southwest Healthcare Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Southwest Healthcare Services (Healthcare Provider, ND)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Washington AGresidents of WA | Mar 31, 2023 | 1,225 |
| Vermont AGresidents of VT | Mar 31, 2023 | |
| Vermont AGresidents of VT | Mar 31, 2023 | |
| HHS archivetotal | Apr 1, 2023 | 15,996 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 15996 · backfill source
- 2026-09-25 · summary: empty to The entity (CE), Southwest Healthcare Services, reported that it was the subject of a ransomware attack that affected the protected health information (PHI) of 15,996 individuals. The PHI involved clinical, financial, and demographic inform · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-03-31-southwest-healthcare-services-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-03-31-southwest-healthcare-services-data-breach-notice-consumers-0 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.