A ransomware campaign had been launched against Fred Hutchinson Cancer Centre, and the then-unidentified threat actors were attempting to extort victims directly. Although they haven't released any data, they have threatened to release 533.1 GB of data or 711,627 files. Although they are not now easily legible, the thumbnail 16 screenshots will reportedly be accessible soon. They have asked a patient price of $50 to remove a patient’s data.

In November 2023, Seattle-based Fred Hutchinson Cancer Center fell victim to a Hunters International ransomware attack, compromising the sensitive data of 800,000 patients. The breach involved exfiltration of personal and medical information, which attackers leveraged for extortion tactics targeting cancer patients. While the organization did not pay the ransom, the fallout led to a $52.5 million class-action settlement, including: - $25.5 million for insurance and medical fraud monitoring for affected individuals. - $11.5 million in direct cash payouts to victims. - $13.5 million allocated for infrastructure security upgrades. The attack underscored severe reputational and operational damage, with no confirmed misuse of data but significant financial and trust-related consequences. The incident also coincided with reports of Hunters International’s impending rebrand, reflecting the evolving threats in the ransomware landscape.

The Washington State Office of the Attorney General reported that Fred Hutchinson Cancer Center experienced a data breach due to theft or mistake on October 27, 2023. The breach potentially affected 14,898 individuals, compromising names, Social Security numbers, full dates of birth, health insurance policy or ID numbers, and medical information. The report was submitted on February 29, 2024.

The Washington State Office of the Attorney General reported on October 21, 2022, that the Fred Hutchinson Cancer Center experienced a data breach involving unauthorized access to an employee's email account from March 25 to March 26, 2022, potentially exposing personal information of 79,814 residents. The breached data included names, Social Security numbers, driver’s license numbers, and health insurance information.