Clark County, WA, experienced a data breach between October 16 and October 21, 2023. This incident affected at least 58,168 individuals, as confirmed by regulatory filings.
The breach exposed sensitive data including names, Social Security numbers, driver’s license or state ID numbers, financial and banking information, dates of birth, passport numbers, health insurance policy/ID numbers, and medical information. While specific financial and health data were compromised, the final count of individuals notified by Clark County remains unclear.
A class action lawsuit has been filed regarding this breach, specifically the case of "Allen v. Clark County." Additionally, Clark County agreed to an $800,000 settlement related to a class action filed in Clark County Superior Court.
Clark County began notifying affected residents in May 2025. According to Washington law, breaches affecting more than 500 state residents require notification to the Attorney General, a threshold clearly met in this incident.