October 12, 2022

MultiCare addresses third-party data breach

TACOMA, Wash. — MultiCare announced today that it is part of a security event that originated with Kaye-Smith, a third-party entity. Kaye-Smith prints W-2 and 1099 forms for MultiCare.

In early June 2022, Kaye-Smith confirmed that they were subject to a ransomware attack involving several of their customers including MultiCare. The names, addresses and social security numbers for a number of current and former MultiCare employees were included in the data acquired without authorization. MultiCare was officially informed that the breach included its employees’ information on Sept. 30, 2022.

Kaye-Smith took immediate steps over the summer to re-secure the affected data and instituted a monitoring program to search for any exposure of the data involved in this incident. They have seen no evidence, and has no reason to believe, that any of the data was or will be made available to the public.

Kaye-Smith will begin sending letters to the MultiCare employees affected by this breach the week of Oct. 17. Impacted employees will be offered two years of free credit monitoring and protection through Equifax Credit Watch Gold.

MultiCare takes our responsibility to protect the sensitive information entrusted to our organization very seriously. We will remain ever-vigilant to ensure the ongoing security of our patients and our employee data.