Data Breaches Affecting Thousands at Gastro Health and Spokane Digestive Disease Center

Two prominent digestive health organizations have confirmed data breaches impacting the protected health information of thousands of patients.

Key Points:

• Gastro Health experienced unauthorized access due to phishing attacks impacting email accounts.
• Spokane Digestive Disease Center identified suspicious activity in an employee's email account, leading to unauthorized access.
• Both organizations are offering credit monitoring services to affected individuals, highlighting the serious potential for identity theft.

Gastro Health, a healthcare provider with numerous locations across several states, has reported a security incident where employees fell victim to phishing attacks. This led to unauthorized access to their email accounts, compromising sensitive patient information including Social Security numbers and medical records. Since the breach was detected on February 25, 2026, the company has begun mailing notification letters and offering credit monitoring services for affected individuals. The Washington Attorney General noted that more than 1,800 residents from the state may be impacted, although the total number of affected individuals has not yet been confirmed.

In a separate incident, Spokane Digestive Disease Center in Washington also reported a security breach involving unauthorized access to an employee’s email account. This incident, identified on February 19, 2026, revealed that sensitive personal information, including Social Security numbers and credit card information, was accessed. An investigation indicated that this unauthorized access occurred over a span of several weeks. The center has provided affected individuals with 12 months of credit monitoring services and is taking steps to enhance their email security to prevent future incidents. Collectively, these breaches underline the ongoing risks faced by healthcare organizations in safeguarding personal data.

What measures do you think healthcare organizations should implement to better protect patient information?

Learn More: HIPAA Journal

Want to stay updated on the latest cyber threats?

👉 [Subscribe to r/PwnHub](https://www.reddit.com/r/pwnhub)