1Life Healthcare Data Breach Notice (Washington Attorney General)

The filing from 1Life Healthcare confirms that the personal information of 16,884 people was exposed in an incident on June 08, 2026. The categories listed are name, Social Security number, full date of birth, health insurance policy or ID number, medical information, and protected health information owned or licensed by a HIPAA covered entity. No passwords were exposed.

Your Social Security Number and Date of Birth Are Now in Play

If you received a notification from 1Life Healthcare, your name, Social Security number, and exact date of birth are among the details now outside the organisation’s control. This specific combination is the foundation for synthetic identity fraud, tax refund fraud, and new account identity theft. These risks do not expire when the news cycle moves on.

The presence of your full date of birth alongside your SSN makes it significantly easier for someone to impersonate you with creditors, government agencies, or healthcare payers. Medical information and your health insurance ID number add another layer: they can be used to file false claims, order prescription services in your name, or request medical records that should remain private.

What the 25-Day Timeline Actually Shows

The incident occurred on June 08, 2026 and the filing reached the Washington Attorney General on July 03, 2026 — an interval of 25 days. This is faster than many breach notifications. The record does not disclose how the incident was discovered or whether data was copied, only that these categories were involved for 16,884 individuals.