Spokane Digestive Disease Center, P.S. experienced a data breach between January 22, 2026, and February 18, 2026, involving unauthorized access to an employee's email account. The company disclosed this incident and reported it to HHS on April 20, 2026, and the Washington Attorney General on May 26, 2026. Notification letters were sent to affected individuals starting May 26, 2026.
The breach affected 2,093 Washington residents. The exposed data types include names, dates of birth, Social Security numbers, driver’s license numbers, financial account information, credit card details, electronic signatures, and medical information. The company is offering 12 months of complimentary credit monitoring and identity theft protection via Experian IdentityWorks.
Details can emerge later, and notices may be delayed.