On June 15, 2019, Grays Harbor Community Hospital fell victim to a ransomware cyberattack, compromising the personal and medical data of approximately 88,000 individuals. The exposed information included highly sensitive details such as names, Social Security numbers, dates of birth, and medical records. The attack disrupted hospital operations, raising concerns about patient privacy, potential identity theft, and financial fraud. Given the nature of the compromised data—particularly medical and financial information—the incident posed severe risks to both the affected individuals and the hospital’s operational integrity. The breach underscored vulnerabilities in healthcare cybersecurity, where ransomware attacks can cripple critical services while exposing vast amounts of protected health information (PHI). The hospital faced reputational damage, regulatory scrutiny, and the financial burden of mitigation efforts, including potential lawsuits and compliance penalties under HIPAA (Health Insurance Portability and Accountability Act).

On May 6, 2019, Grays Harbor Community Hospital experienced a ransomware cyberattack that led to a significant data breach, reported by the Washington State Attorney General's Office on January 29, 2021. The incident compromised the personal and medical information of approximately 5,136 patients, including 4,984 Washington residents. The exposed data included names, full dates of birth, and medical records, raising concerns about identity theft, fraud, and unauthorized access to sensitive health information. The breach posed serious risks to patient privacy and trust in the hospital’s cybersecurity measures. While the exact financial or operational impact on the hospital was not detailed, the exposure of medical information—a highly sensitive category—heightened the severity of the incident. Ransomware attacks often disrupt healthcare operations, potentially delaying critical services, though the article did not specify whether patient care was directly affected. The breach underscored vulnerabilities in the hospital’s data protection systems, necessitating strengthened security protocols to prevent future incidents.