Neurological Associates of Washington, a healthcare clinic, experienced a ransomware cyberattack in December 2025 attributed to DragonForce. This cyberattack compromised servers storing medical records, leading to notifications for 13,500 state residents. The breach exposed names, Social Security numbers (SSNs), diagnoses, medical information, and other personal information. The DragonForce group claimed to have stolen 1.4 TB of data and posted samples on the dark web.
While 13,500 state residents were notified, another source reports 85,268 rows of data, including SSNs, were found in the breach. The specific state affected has not been publicly identified in the available sources. No explicit financial data was mentioned as compromised.
Details can emerge later regarding the full scope of the breach, and consumer notifications may be delayed.