Yakima Valley Radiology
Disclosed Mar 1, 20242 years ago235,249 affectedConfirmed
Yakima Valley Radiology, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 235,249 individuals. The protected health information (PHI) involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial information, and clinical information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE offered free credit monitoring to affected individuals and implemented additional administrative, technical, and security safeguards to better protect its sensitive data. OCR provide technical assistance to the CE.
What is known
| People affected | 235,249 (as reported to HHS) |
|---|---|
| Disclosed | Mar 1, 2024 |
| Discovered | Aug 18, 2023 |
| Happened | Aug 11, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Yakima Valley Radiologyoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Yakima Valley Radiologyatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Yakima Valley Radiologyjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-03-01 Yakima Valley Radiology Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Yakima Valley Radiology (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 1, 2024 | |
| Washington AGresidents of WA | Mar 1, 2024 | 161,768 |
| Oregon DOJresidents of OR | Mar 1, 2024 | 235,249 |
| Vermont AGresidents of VT | Mar 1, 2024 | |
| HHS archivetotal | Mar 1, 2024 | 235,249 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 235249 · backfill source
- 2026-09-25 · summary: empty to Yakima Valley Radiology, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 235,249 individuals. The protected health information (PHI) involved included name · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-03-01-yakima-valley-radiology-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-08-18 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.