2026 Spokane Digestive Disease Center — employee email account compromise
Data compromised
Names, DOB, DL/state ID, SSN, credit card, financial account info, electronic signatures, medical information
Technical writeup
Verified practice notification summarized by HIPAA Journal. Spokane Digestive Disease Center found suspicious activity in an employee email account February 19, 2026; investigation confirmed unauthorized access on various dates January 22–February 18, 2026. May 8, 2026 review confirmed sensitive PII/PHI categories including SSNs and payment data. Public national tally not stated in the summary. recordsAffected 0; companyConfirmed true.
Root cause
Unauthorized access to an employee email account