WellPoint (Independent Clinics of Washington, Elevance Health) data breach
WellPoint, operating alongside Independent Clinics of Washington under Elevance Health, reported a data breach to the Washington Attorney General on June 2, 2026. This incident exposed highly sensitive personal and medical information, posing significant risks to affected individuals. The breach is currently under monitoring, indicating ongoing review.
Docket sheet
- Company
- WellPoint (Independent Clinics of Washington, Elevance Health)
- Venue
- Washington Attorney General
- Filed
- June 2, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurred
The filing does not state when the incident happened.
- 2
Reported to the Washington Attorney GeneralJune 2, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Health Insurance ID Number
- Medical Record Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
WellPoint, along with Independent Clinics of Washington, and as part of Elevance Health, filed a data breach report with the Washington Attorney General on June 2, 2026. This incident, currently under monitoring, signifies an ongoing review of the security lapse that impacted this healthcare organization.
The breach involved the exposure of various categories of sensitive personal and health information. The reported compromised data includes Full Name, Date of Birth, Social Security Number, Health Insurance ID Number, Medical Record Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates.
Exposure of such detailed medical and personal records presents lasting risks for affected individuals. This information can be exploited for medical identity theft, fraudulent healthcare claims, or sophisticated financial fraud using the Social Security Number. Unlike some data compromises, the sensitive nature of this information means the vulnerabilities created are often permanent.
As a significant entity within the healthcare sector, WellPoint and its affiliated organizations are legally obligated under HIPAA and Washington state data security statutes to safeguard patient data. A breach of this magnitude suggests potential shortcomings in the administrative, physical, or technical safeguards that are mandated to secure confidential information entrusted to them.
Washington residents who have received an official data breach notification from WellPoint or its related entities should carefully examine the document. This letter legally acknowledges the compromise of your confidential data. Understanding your rights and potential next steps is crucial; a free case review can provide clarity regarding the implications of this breach and potential legal avenues without any upfront cost.
If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.
Other Washington docket entries
- Hands On Children’s MuseumWashington AGNovember 5, 2026Monitoring
- DreamHost, LLCWashington AGNovember 4, 2026Monitoring
- Frontline EducationWashington AGOctober 27, 2026Monitoring
- JM Bullion, Inc. (Silver.com, ProvidentMetals.com)Washington AGOctober 13, 2026Monitoring
- DriveWealth, LLCWashington AGOctober 13, 2026Monitoring
- iRhythm Technologies Inc.Washington AGOctober 6, 2026Monitoring
- Poppins Payroll CompanyWashington AGSeptember 29, 2026Monitoring
- Ridgeway Pharmacy LtdWashington AGSeptember 21, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.