Spokane Digestive Disease Center, P.S. data breach

Clerk's notes

Spokane Digestive Disease Center, a medical practice in Washington state specializing in gastrointestinal health, formally reported a data security incident on May 26, 2026. This report to the Washington Attorney General indicates that the center's digital infrastructure may have been compromised, affecting patient data.

The breach exposed several categories of highly sensitive patient data. These include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such detailed medical and personal identifiers carries significant risks, including medical identity theft, where fraudsters might use stolen credentials for unauthorized treatments or billing, and financial fraud.

Healthcare providers like Spokane Digestive Disease Center are legally obligated under federal laws such as HIPAA and Washington state statutes to protect patient information. These regulations require robust security measures, including network monitoring, encryption, and regular audits, to prevent unauthorized access. The occurrence of a data breach suggests that these mandated safeguards may have been insufficient to defend against cyber threats.

If you have received an official data breach notification letter from Spokane Digestive Disease Center, it confirms that your private information was involved in this incident. This notification establishes the basis for legal recourse, as the increased risk of future identity theft or fraud constitutes a concrete injury. Our firm is currently monitoring this case and offers a free review to help affected individuals understand their options.

If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.