Regulator-posted notice

Breach notice filed by Johnson & Johnson Health Care Systems Inc. (“Janssen”) (September 2023)

Organization named: Johnson & Johnson Health Care Systems Inc. Provisional: identity as filed, not yet matched to the directory

What the sources say

Washington Attorney General data breach notifications Primary notice

Posted on the Washington Attorney General data breach notifications with a submission date of Sept. 5, 2023.

Organization as reported: Johnson & Johnson Health Care Systems Inc. (“Janssen”)
Information types as reported: Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information
Submission date: Sept. 5, 2023
Observed by BreachRecords: 2026-10-19 04:56 UTC (revision 25839, page:14:row:48)
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Washington data breach notifications dataset (data.wa.gov sb4j-ca4h) Duplicate filing

Posted on the Washington data breach notifications dataset with a submission date of Sept. 5, 2023.

Organization as reported: Johnson & Johnson Health Care Systems Inc. (“Janssen”), NJ
Entity type as reported: Health
Category as reported: Unauthorized Access
Discovery date as reported: Aug. 2, 2023
Submission date: Sept. 5, 2023
Observed by BreachRecords: 2026-11-01 20:03 UTC (revision 63281, row:997)
Extraction: Parsed from a document; extraction confidence 0.85
Archived copy: Held in the private archive (provenance)

The listing records a filing with the agency; it is not a finding by the agency.

Figures, per source

53,970 individuals affected (residents of the reporting state), according to the Washington Attorney General data breach notifications, source date Sept. 5, 2023, revision observed 2026-10-19.
53,970 individuals affected (residents of the reporting state), according to the Washington data breach notifications dataset, source date Sept. 5, 2023, revision observed 2026-11-01.

Each figure is one source's figure with the basis that source gave. Figures from different sources are shown side by side and are not added, averaged or chosen between.

Timeline

Source dates are the dates the sources give. Observation dates are when BreachRecords recorded each revision.

2023-09-05Submission date (Washington Attorney General data breach notifications)
2023-09-05Submission date (Washington data breach notifications dataset)
2026-10-19Observed by BreachRecords (revision 25839)
2026-11-01Observed by BreachRecords (revision 63281)
2026-11-04Approved by a reviewer

Organizations linked by a reviewer

Johnson & Johnson Health Care Systems Inc. Named as the filer Provisional: identity as filed, not yet matched to the directory Linked 2026-11-04, method manual.

Archived evidence

264d45f73831ec8fc298837002b836f792a7cfd7f3d6b4d2128484a23223c042
text/csv, 453,656 bytes, retrieved from Washington data breach notifications dataset, 2026-11-01 20:03 UTC. Archived privately · Provenance · Source page
2865e84e95d59e4d039cd5dfada805fb1e01f69078de4d72d093dc4d7121c4ca
text/html, 154,711 bytes, retrieved from Washington Attorney General data breach notifications, 2026-10-19 04:56 UTC. Archived privately · Provenance · Source page

Records reflect source filings as of the dates shown. BreachRecords is not a regulator.

Request a correction

A record that disagrees with its source, names the wrong organization or duplicates another is corrected after review. This form is about Breach notice filed by Johnson & Johnson Health Care Systems Inc. (“Janssen”) (September 2023). We acknowledge every request within two business days. We reply by email.

The form is being set up. Check back soon.