4.1 Million Impacted by AdaptHealth Data Breach
At a glance
- Severity
- Medium
- Used in attacks
- No flaws named
- Industries
- Finance
- Reported by
- 1 outlet
More than 4.1 million individuals had their personal, health, and insurance information stolen in a data breach at healthcare company AdaptHealth.
Operating over 680 facilities across the US, AdaptHealth describes itself as a network of medical equipment companies that provides patients with healthcare solutions and medical equipment.
The company was hacked in early June, when a threat actor gained access to its cloud-based applications, including internal systems used for patient management and document storage.
After the attacker contacted the company, it confirmed the data breach, including the theft of a password file associated with insurance billing.
The hacker used social engineering to compromise a user session at a third-party contractor, AdaptHealth said.
On August 14, the company announced that the threat actor had exfiltrated names, contact and demographic information, and health and health insurance information.
Advertisement. Scroll to continue reading.
The company said Social Security numbers and financial information were not affected.
At the time, it also notified the US Department of Health and Human Services (HHS) that 4,115,802 individuals were affected. HHS added AdaptHealth to its data breach portal this week.
Another major healthcare data breach reported to the HHS on August 14 and recently added to the portal affected clinical genomics company Baylor Genetics.
Like AdaptHealth, Baylor Genetics was hacked in June, and hackers stole patients’ names, dates of birth, medical test data, health insurance information, and Social Security numbers. The PII of Baylor Genetics’ employees was also compromised in the incident, along with their financial information.
Overall, hackers stole the electronic protected health information of 2,810,878 individuals, Baylor Genetics told the HHS.
Related: Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal
Related: 153 Million Driver License Images Offered on Dark Web
Reproduced in full under licence from SecurityWeek. © SecurityWeek. Written by Ionut Arghire.
Coverage
One outlet has carried this so far.
2026-09-10 11:20 UTC
Related stories
- Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
The Hacker News · 2026-09-16
- Webinar: What happens in the first hours of a Google Workspace breach
BleepingComputer · 2026-09-16
- Threat Intelligence Alone Won't Close the Exploitation Gap
The Hacker News · 2026-09-16
- Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
The Hacker News · 2026-09-16
- CenterPoint Energy confirms customer data stolen in cyberattack
BleepingComputer · 2026-09-15