Whitman Hospital & Medical Clinics Data Breach Details
On February 28, 2025, WHMC was alerted to unusual activity in its IT environment. In response, the organization launched an investigation, secured its systems, and notified law enforcement. A third-party forensic firm was engaged to assist with the investigation.
The investigation revealed that an unauthorized party accessed WHMC’s systems between December 26, 2024, and February 28, 2025. During this time, the unauthorized party may have accessed and/or acquired files containing personal information of patients and members of WHMC’s Group Health Plan.
On April 11, 2025, WHMC began mailing notification letters to individuals whose information may have been affected. As part of its response, the organization is offering complimentary credit monitoring and identity protection services to eligible individuals.
What Information Was Compromised?
The compromised data may include:
-
Name
-
Date of birth
-
Address
-
Social Security number
-
Financial account information
-
Diagnosis and lab results
-
Medications and treatment information
-
Health insurance details
-
Provider names
-
Dates of treatment
However, WHMC has clarified that there is no evidence indicating misuse of the data at this time. Cyberattacks targeting sensitive health data are increasingly common, as healthcare organizations are particularly vulnerable.
