Capital Medical Center

Capital Medical Center, also known by its alias, operates as a medical center providing healthcare services to patients in the United States. The organization delivers a range of clinical services that include inpatient and outpatient care, diagnostic testing, and treatment programs. Its headquarters is situated in the United States, with operations that have been linked to the state of Washington through a reported security incident. The center maintains an affiliation with a cancer care provider that offers specialized oncology services to patients. This relationship allows the medical center to refer individuals for cancer diagnosis, treatment, and follow‑up care. Through these activities, Capital Medical Center serves a broad patient population seeking general and specialized medical attention.

The organization is distinguished by its connection to an affiliated cancer care provider, which became the focus of a ransomware attack in January 2021 that exposed approximately 30 gigabytes of unencrypted patient health records and employee files. During the breach, attackers exfiltrated sensitive data spanning several years, including medical reports and personally identifiable information, and later posted the material publicly. Capital Medical Center’s parent organization conducted an internal investigation and asserted that the incident did not disrupt its own operations, while the cancer care provider did not respond to multiple inquiries about the event. No formal breach notifications were filed on regulatory platforms or posted on the organizations’ websites, despite the data remaining accessible for months. This situation highlighted concerns about the effectiveness of security monitoring and compliance with breach‑notification requirements at the involved entities. Structurally, Capital Medical Center operates under a parent organization that oversees its governance and coordinates responses to security incidents.