The Washington State Office of the Attorney General disclosed that March of Dimes suffered a ransomware attack on February 7, 2020, compromising the personal data of 446,097 individuals. The breach was detected months later, on July 16, 2020. The exposed information included highly sensitive details such as full names, dates of birth, medical records, and other unspecified personal data. The attack posed severe risks to affected individuals, given the nature of the leaked data—particularly medical information, which could enable identity theft, fraud, or targeted phishing schemes. The delayed discovery of the breach further exacerbated potential harm, as malicious actors had prolonged access to the compromised systems. The incident underscored vulnerabilities in the organization’s cybersecurity defenses, leading to significant reputational damage and potential legal repercussions under data protection regulations. As a nonprofit focused on maternal and infant health, the breach eroded public trust and raised concerns about the security of sensitive health-related data handled by charitable organizations. The financial and operational costs of mitigation, notification, and regulatory compliance added to the overall impact of the attack.