HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 3, 2017.
- Organization as reported
- Community Health Plan of Washington, WA
- Entity type as reported
- Health Plan
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Jan. 3, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14308, row:5447)
- Archived copy
- Held in the private archive (provenance)
On January 3, 2017, the covered entity (CE) reported that on November 3, 2016, Summit Reinsurance, a business associate (BA), indicated it discovered ransomware on one of its computer servers. The breach affected approximately 1,375 individuals’ protected health information (PHI) and included patients’ names, addresses, dates of birth, provider names, and health insurance claim information. The CE provided breach notification to HHS, affected individuals, and the media, and also provided free credit monitoring. The CE revised its policies and procedures related to the nature of the breach. OCR provided substantial technical assistance to the CE and obtained assurances that the CE implemented the corrective actions noted above.