Wellpoint Washington Data Breach

Wellpoint Washington, Inc., an insurance company, posted a substitute notice about a data breach affecting Independent Clinics of Washington (“ICW”), a delegated provider of Elevance Health. Files in one employee email account may have contained personal and health information for certain individuals.

Wellpoint Washington and ICW’s Data Breach Investigation

On July 2, 2025, ICW discovered a social engineering incident involving unauthorized access to an employee email account. The breach occurred between June 24 and July 2, 2025. Upon discovery, ICW launched an immediate investigation, partnering with a cybersecurity firm to determine the scope and implications of the incident.

The investigation revealed that an unknown threat actor may have acquired files containing protected health information. To date, ICW has no evidence that the information has been misused. The potentially affected data varies by individual and may include:

• Name, address, phone number, email
• Date of birth
• Social Security number
• Driver license number
• Health insurance member identification number
• Medical and pharmacy information

No credit card information was involved.

Affected individuals will be notified directly by Wellpoint Washington, Inc. For those who could not be reached directly, substitute notices were provided. Wellpoint has established a dedicated toll-free line and online resources to help individuals understand the breach and protect their information.

When Did This Breach Occur?

• Date Breach Occurred: June 24 – July 2, 2025
• Date Breach Discovered: July 2, 2025
• Substitute Notice Posted: After July 2, 2025
• Type of Incident: Social engineering / unauthorized email access
• Individuals Affected: Specific number not fully disclosed

What Information Was Breached?

Potentially exposed information may include:

• Contact information (name, address, phone number, email)
• Date of birth
• Social Security number
• Driver license number
• Health insurance ID
• Medical and pharmacy information

What You Can Do

If you were potentially affected by this incident:

• Monitor credit reports and financial accounts for suspicious activity.
• Review medical and insurance statements for errors or unauthorized charges.
• Place a fraud alert or security freeze with major credit bureaus.
• Be vigilant against phishing attempts or suspicious communications.
• Keep records of any suspicious activity, time spent, or expenses incurred addressing the incident.

File a Data Breach Lawsuit Against Wellpoint Washington

Individuals affected by this breach may have legal rights. Organizations that handle sensitive health and personal information are expected to implement reasonable safeguards. Exposure of Social Security numbers, insurance IDs, or medical information may create risks of identity theft, medical fraud, and privacy violations.

A data breach lawsuit may seek compensation for loss of privacy, out-of-pocket costs, time spent monitoring accounts, and other harms caused by the exposure of sensitive information.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.