Morgan & Morgan Investigates Fred Hutchinson Cancer Center Data Breach

Morgan & Morgan’s industry leading data privacy attorneys are investigating Fred Hutchinson Cancer Center (“Fred Hutch”) regarding its recent data breach (which may be referred to as a “data event” or “data security incident”). The Fred Hutch data breach involved sensitive personally identifiable information and protected health information that may have been exposed to an unauthorized individual through exploitation of a vulnerability called “Citrix Bleed.”

We are investigating, among other things, the following:

• how Fred Hutch acquired the sensitive information;
• whether Fred Hutch should have had the sensitive information;
• whether and, if so, why Fred Hutch stored this sensitive information in an Internet-accessible environment;
• whether Fred Hutch encrypted the sensitive information;
• whether Fred Hutch deleted sensitive information it no longer had a reasonable need to retain;
• whether Fred Hutch implemented appropriate and adequate security measures to protect the sensitive information; and
• whether Fred Hutch has provided affected individuals adequate protection and compensation for any harms they have experienced as a result of the data breach.

Fred Hutch is a medical services provider focusing on cancer prevention, diagnosis, treatment, and survivorship. On or around November 19, 2023, Fred Hutch became aware of an intrusion into its clinical network systems that may have resulted in unauthorized access to and/or acquisition of personal information, including Social Security numbers. Recently, Fred Hutch sent out data breach notification letters to those who were impacted by the breach. Approximately one million individuals may have been affected by the breach.

If you received a data breach notification and would like to discuss with an attorney, we are available at 855.696.0024.

We place a significant amount of trust in the companies we choose to share our information with, making the data breach all the more unacceptable. If you suspect that your information was exposed in the Fred Hutch data breach, Morgan & Morgan is here to help.