WellPoint / Independent Clinics of Washington, an Elevance Health-affiliated healthcare provider, reported a data breach involving unauthorized access to an employee email account. The incident was tied to a phishing-related compromise and was disclosed to regulators and consumers in 2025. The breach occurred on June 24, 2025.
The breach affected approximately 12,020 individuals. Exposed data included names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, driver’s license numbers, health insurance ID numbers, medical information, pharmacy information, and possibly financial information. The majority of affected individuals were residents of Washington, with some residing in Texas. The incident involved Independent Clinics of Washington, which operates as a delegated provider for Wellpoint Washington / Elevance Health.
Additional details about the incident, including the exact date of discovery by the company and specific dates for regulatory and consumer notifications, have not been explicitly stated in the public reports. It remains unclear if all individuals have received notification.