On February 25, 2025, Lake Washington Vascular PLLC disclosed a significant data breach affecting 21,534 individuals. The practice posted the notice on their website and disclosure filed with the U.S. Department of Health and Human Services.
The Qilin ransomware group claimed responsibility for the attack on February 19, 2025 and stated they successfully accessed and exfiltrated sensitive data from Lake Washington Vascular's internal systems.
Due to the sensitive nature of healthcare data, the severity of this breach is considered high, potentially exposing affected individuals to risks of identity theft, fraud, and other privacy-related concerns.
Following the ransomware attack, Lake Washington Vascular reported the incident to the appropriate authorities, including the U.S. Department of Health and Human Services. The organization has also issued a public notification to inform potentially affected individuals about the breach.
You can view the official notification issued by Lake Washington Vascular PLLC on their data breach notification PDF.
If you have been notified or believe you may have been affected by this breach, it is recommended that you take immediate steps to protect your personal information. Consider monitoring your financial accounts closely, reviewing your credit reports regularly, and placing a fraud alert or credit freeze on your credit files if necessary.
Additionally, affected individuals should remain vigilant for potential phishing emails, phone calls, or other communications that could attempt to exploit the stolen information. If you suspect fraudulent activity, report it immediately to your financial institutions and law enforcement authorities.
For further updates and guidance, you can visit the U.S. Department of Health and Human Services' breach reporting portal, where the breach has been officially documented.
For more information about the practice, visit the Lake Washington Vascular PLLC website.