Providence has notified patients about a technology issue tied to Health Gorilla, a health information network that connects to Providence’s electronic health record system, Epic. Health information exchanges like this one allow different health care providers to share patient data so care teams can coordinate treatment. On Feb. 11, 2026, Providence learned that some patient information shared through this exchange may have been accessed or shared by certain participants without a defined business need. Providence says there is no indication that its medical records were hacked or stolen by any outside party, including Health Gorilla or its participants — the concern is around how the data-sharing permissions were used, not a break-in.
The data exchange activity in question took place between August 30, 2024 and December 8, 2025. If you received a notification letter, it means Providence has identified you as a patient whose information may have been part of this exchange activity during that window.
What information was exposed?
- Full name
- Date of birth
- Address
- Phone number
- Insurance policy number
- Emergency contact information
- Dates of service
- Places of service
- Test results
- Medications
- Diagnoses
- Other clinical records used by your care team
Providence states that Social Security numbers were not included in this incident. To help affected patients, Providence is offering one year of free identity protection services through IDX, including credit monitoring you’ll need to activate yourself. You can enroll at https://app.idx.us/account-creation/protect using the Enrollment Code printed at the top of your letter, or call 1-888-202-1558 (Monday-Friday, 6 a.m.-6 p.m. Pacific). The enrollment deadline is July 9, 2026.
What should you do now?
- Enroll in the free IDX identity protection membership before the July 9, 2026 deadline, and be sure to activate the included credit monitoring — it does nothing until you turn it on.
- Because health insurance and clinical information were involved, watch your insurance statements and Explanation of Benefits notices for services you don’t recognize, which can be a sign of medical identity theft.
- Request your free annual credit reports from all three bureaus at annualcreditreport.com and review them for unfamiliar accounts.
- Consider placing a fraud alert or a security freeze with Equifax, Experian, and TransUnion; freezes are free and prevent new accounts from being opened in your name.
- For broader peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- If you spot suspicious activity, report it to IDX through the number or website above, and you have the right to file a police report if you experience identity fraud.
If you have questions, Providence can be reached at 1-888-202-1558 (Monday-Friday, 6 a.m.-6 p.m. Pacific Time).