This podcast was generated with artificial intelligence for listeners entertainment and convenience. It is based on the human authored “Washington’s Data Breach Crisis: 2026 Breach Count Already Rivals 2024’s Record” published on Tuesday, 2 June. While I (Joanna Wiggum) am biased towards the written form of this content, and would love for all listeners to be readers as well, the referenced cybersecurity tips and sources are available below.
What Is Happening Right Now in Washington, and Why You Should Not Accept Reassurances
On the morning of Sunday, May 24, 2026, Chelan County became the latest in a string of Washington institutions to be hacked. This particular breach impacted computers, phones, and network systems countywide. The courthouse moved to limited operations, district court cases were rescheduled, and sheriff’s administrative offices closed. As of this writing, the full scope of the attack has not been publicly confirmed, and it has not been established whether resident personal data was accessed or exfiltrated. What is known is that county systems hold property records, tax filings, court documents, vital records, voter registration, and licensing data. Until a forensic investigation concludes and results are disclosed, Chelan County residents cannot know whether their data was accessed. Given that the average breach takes 181 days to identify from initial compromise, and that Washington law permits up to 30 days after discovery before notification is required, residents should not wait for an official notification to take protective action.
What Washingtonians Should Do Right Now
Do not wait for an official notification. The documented history in this article shows that notification, when it comes, arrives long after attackers have already had access to your data. The following steps cost nothing and can be completed today.
1. Freeze your credit at all three bureaus. Go directly to Equifax (equifax.com/personal/credit-report-services), Experian (experian.com/freeze), and TransUnion (transunion.com/credit-freeze). A freeze is free under federal law and prevents new accounts from being opened in your name even if someone has your Social Security number.
2. Enroll in the IRS Identity Protection PIN program. Go to irs.gov/identity-theft-central. This adds a six-digit code to your tax return that prevents anyone else from filing a return in your name, even with your SSN.
3. Call the fraud department at every financial institution you use. Tell them your county government was breached and that you want your account flagged for unusual activity, and ask whether they can add secondary verification for wire transfers and large withdrawals.
4. Change every security question answer on every account to fictional, randomized information. The data a county holds, property records, court records, vital records, voter registration, family member names, addresses going back decades, is precisely the information used to bypass knowledge-based authentication. Your mother’s maiden name, your high school mascot, the street you grew up on: all of it may now be in a criminal’s hands. Replace every security question answer with a random string and store it in a password manager. Never reuse answers across accounts.
5. Set up dark web monitoring. HaveIBeenPwned.com (free) will alert you when your email addresses appear in newly discovered breach data. Paid services from Experian, Aura, and similar providers can monitor your SSN and phone number as well.
6. Be aggressively skeptical of inbound contact. Anyone who calls, emails, or texts claiming to be from Chelan County government, the IRS, the Washington DOL, a utility, your bank, or any government agency and who already knows details about you should be treated as a potential threat. Hang up and call back on a number from the official website. Attackers who have your county data can build personalized, convincing impersonation scripts. Knowing your address, your property details, and your family members’ names is enough to make a fraudulent call sound completely legitimate.
7. Document everything. If you receive a suspicious contact, a fraudulent account notice, or any indication your identity has been misused, file a report with the FTC at IdentityTheft.gov immediately. This generates an official recovery plan and an identity theft report that creditors are legally required to honor.
Sources for this article, including the Washington AG 2024 Data Breach Report, the IBM Cost of a Data Breach Report 2025, Chelan County’s official Facebook and emergency management statements, KOZI’s Nic Scott news reporting, and the Washington AG breach notification dataset.
Primary Sources
Washington State AG 2024 Data Breach Report — agportal-s3bucket.s3.us-west-2.amazonaws.com/2024%20Data%20Breach%20Report.pdf
Washington State AG Data Breach Live Statistics — atg.wa.gov/data-breach-live-statistics (accessed June 1, 2026)
Washington State AG Data Breach Notifications Dataset — data.wa.gov/Consumer-Protection/Data-Breach-Notifications-Affecting-Washington-Res/sb4j-ca4h
RCW 19.255.010 — app.leg.wa.gov/rcw/default.aspx?cite=19.255.010
RCW 42.56.590 — app.leg.wa.gov/rcw/default.aspx?cite=42.56.590
IBM Cost of a Data Breach Report 2025 (Ponemon Institute) — newsroom.ibm.com
WA AG v. T-Mobile, King County Superior Court, filed January 2025 — atg.wa.gov/news/news-releases/ag-ferguson-files-lawsuit-against-t-mobile-massive-data-breach
WA AG Premera Settlement 2019 — atg.wa.gov/news/news-releases/attorney-general-ferguson-s-investigation-premera-data-breach-results-premera
WA AG v. Uber (2017) — patch.com/washington/seattle/wash-ag-bob-ferguson-suing-uber-over-data-breach
Navia Benefit Solutions Breach Notification, March 13, 2026 — naviabenefits.com/notice-of-data-event; HIPAA Journal — hipaajournal.com/navia-benefit-solutions-data-breach
Fred Hutchinson Cancer Center Settlement — hipaajournal.com/fred-hutchinson-cancer-center-data-breach-settlement; fredhutch.org/en/news/releases/2023/12
WA DOL License Express Tort Claim — king5.com, fox13seattle.com, March 2026
JATC Breach Notification — atg.wa.gov/data-breach-notifications, data.wa.gov dataset record
Javelin Strategy and Research, 2026 Identity Fraud Study — javelinstrategy.com; as reported by foxnews.com/tech/last-years-breach-identity-fraud and aol.com/articles/why-last-years-breach-years-131528929.html
WA Department of Financial Institutions, Identity Theft Awareness Week 2026 — dfi.wa.gov/financial-education/blog/identity-theft-awareness-week-2026
FBI IC3 2025 Annual Internet Crime Report — ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf
KnowBe4 Phishing Threat Trends Report, Vol. 5 (March 2025) — knowbe4.com/press/new-knowbe4-report-reveals-a-spike-in-ransomware-payloads-and-ai-powered-polymorphic-phishing-campaigns
Mandiant M-Trends 2025 (vishing as second-most observed intrusion vector) — cloud.google.com/security/resources/m-trends
GAO Report GAO-23-106696, Unemployment Insurance Fraud During COVID-19 Pandemic — gao.gov/products/gao-23-106696
U.S. Department of Labor, Report Unemployment Identity Fraud — dol.gov/agencies/eta/UIIDtheft
Leave a Reply