Electronic health record company says customer data stolen in breach
Veradigm disclosed that attackers used stolen vendor credentials via an API to steal patient data including Social Security numbers, as the Gentlemen ransomware gang claims 3.5 million patients' records.
Electronic health records company Veradigm filed an 8-K with the SEC stating that an unauthorized party obtained credentials from a vendor's environment and used them to access a Veradigm API, downloading patients' personal data including Social Security numbers; no clinical or medical data was involved. The Gentlemen ransomware gang added Veradigm to its leak site, claiming theft of 3.5 million patients' health records. Access was limited to the specific API interface, with no operational disruption. Veradigm was previously hit by SamSam ransomware in 2019 and disclosed a December 2024 breach affecting 2,672,036 people.
- Stolen vendor credentials used to access a customer-facing API
- Social Security numbers exposed; no clinical or medical data involved
- Gentlemen gang claims 3.5 million patients' records stolen
- Veradigm serves thousands of hospitals and doctors; $594M revenue in 2024
- Healthcare breach wave includes Aesto (9M), Baylor Genetics (2.8M), CareCloud (3.7M)
- ATT&CK
- T1078 Valid AccountsT1213.002 Extraction from Information RepositoriesT1567 Exfiltration Over Web Service
- Vendors
- Veradigm
- Threat actors
- The Gentlemen
- Victims
- Veradigm
- Organizations
- SECBoston Scientific
- Countries
- United States
From the original article
3 min read at therecord.mediaVeradigm said access was limited to a specific interface, and did not impact the company’s broader environment such as its networks, servers or databases. The incident did not result in operational disruptions, the company added.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.