On February 17, 2023, Hutchinson Clinic, P.A. posted notice of a data breach on its website. Based on the notice, the incident resulted in an unauthorized party gaining access to consumers’ names, contact information, dates of birth, Social Security numbers, driver’s license numbers, health insurance information, medical record numbers, medical history, diagnoses, and treatment information, and physician names. After confirming that consumer data was leaked, Hutchinson Clinic began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you are a recent patient of Hutchinson Clinic, the recent data breach should be cause for concern. When you visited Hutchinson Clinic, you willingly provided staff with all your personal information, understanding that the company would do everything possible to keep your information secure. However, patients are now questioning whether there was anything Hutchinson Clinic could have done to prevent the cyberattack. As we’ve discussed in prior posts, companies may be financially liable to data breach victims if they fail to implement the necessary safeguards to protect consumer data. These data breach lawsuits not only compensate victims for the financial consequences of a breach but also encourage other companies to be more careful with sensitive consumer data in the future.

What We Know So Far About the Hutchinson Clinic Breach

The available information regarding the Hutchinson Clinic breach comes from the data breach notice posted on the Hutchinson Clinic website. According to this source, on approximately December 21, 2022, Hutchinson Clinic detected suspicious activity within its computer system. In response, the company secured its systems and then launched an investigation with the assistance of third-party forensic specialists in hopes of learning more about the incident and whether any consumer data was leaked as a result.

The Hutchinson Clinic investigation confirmed that between December 19, 2022, and December 21, 2022, an unauthorized party was able to access certain files on its network. Further investigation revealed that some of these files contained confidential patient information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, Hutchinson Clinic began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, contact information, date of birth, Social Security number, driver’s license number, health insurance information, medical record number, medical history, diagnosis and treatment information, and physician names.

On February 17, 2023, Hutchinson Clinic sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Hutchinson Clinic, P.A.

Founded in 1959, Hutchinson Clinic, P.A. is a healthcare services provider based in Hutchinson, Kansas. The company operates three locations in Hutchinson, South Hutchinson and Cheney, where practitioners in 30 clinical departments provide care for patients. Hutchinson Clinic employs more than 100 doctors and 600 staff members, generating approximately $36 million in annual revenue.