Breach Announcement

Woodcreek’s information technology vendor, Netgain Technology LLC, experienced a data breach secondary to a ransomware attack. According to Netgain Technology’s investigation, the breach occurred sometime between November 24 and December 3, 2020, although it is possible that access to Netgain’s systems was as early as September 2020.
​
The server containing Woodcreek’s medical records system was untouched; however, scanned clinical and financial data and other business records on an archive server was stolen by the attackers. The data was returned after the ransom was paid and we have no reason to believe it has been or will be further used or disclosed.  On January 18, 2021, Woodcreek received a copy of the recovered data set and has been working diligently since then to notify affected individuals.  

What Information was Exposed?

For employees, contractors, applicants, and providers: Full names, dates of birth, social security numbers, student identification numbers, health insurance policy numbers, bank account numbers (from direct deposit forms and voided checks), resumes, transcripts, performance appraisals, criminal background check reports, court documents related to garnishments, court orders and decrees, copies of diplomas, degrees, board certifications, Drug Enforcement Agency certificates, payroll withholding authorizations for 401k elections and insurance deduction authorizations, benefit enrollment forms, payroll tax forms (W2s, W4s, 1095s, & K1s), and employee health information, including vaccination records, on-the-job injury reports and safety incident reports.

For parents/guardians who insure patients of Woodcreek Healthcare or MultiCare Health System: Full subscriber names and insurance policy numbers.

Where can I get more information?

Woodcreek is maintaining a call center and website for this breach.  The call center can be reached at (833) 726-0944.  The website URL is https://response.idx.us/woodcreek.