Northwest Medical Homes experienced a data breach involving both personally identifiable information (PII) and potentially protected health information (PHI). The total number of impacted patients has not been released, but could be in the thousands.
Northwest Medical Homes disclosed the data breach to the U.S. Department of Health and Human Services on July 13, 2025. Compromised information may include names, addresses, dates of birth, Social Security numbers, health insurance details, medical records and financial or payment information.
The exposure of both personal and protected health patient information can spose a risk of identity theft and fraud.
In addition to required state and federal disclosures, Northwest Medical Homes will notify affected individuals about the data breach and provide additional information and resources.
If you believe your personal and protected health information may have been compromised in this breach:
More information about the healthcare organization can be found on the Northwest Medical Homes, LLC website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.