We are tracking 50+ companies that sent data breach notification letters to Washington residents and reported to the Washington Attorney General. If you received a notice, you may qualify for compensation — at no cost to you.
My Health MY Data Act (MHMD) & Washington Consumer Protection Act (CPA)
Washington enacted the My Health MY Data Act in 2023 — the strongest health data privacy law in the country outside of HIPAA. MHMD covers consumer health data not protected by HIPAA and provides a private right of action with no cap on damages. The Washington CPA also provides a private right of action for data security violations.
Washington residents with health data exposed have exceptionally strong protections under MHMD's private right of action — they can sue directly without going through the AG. This is one of the most powerful breach remedies in the country.
Each company below is an active case in our tracker. Click any company row to open its full case page — what information was exposed, the AG filing date, and how to start a free claim review.
Received a data breach notification letter from a company in Washington? Find out if you qualify for compensation — no cost, no obligation.
Check My Eligibility →