AdaptHealth confirms 4.1 million people exposed in July cyberattack
AdaptHealth confirmed a ShinyHunters-attributed cyberattack exposed data of 4.1 million patients via a compromised third-party contractor account.
Healthcare company AdaptHealth confirmed 4,115,802 individuals were exposed in an intrusion first disclosed in an SEC filing on July 2, 2026, with the compromise beginning June 5. Attackers used social engineering to compromise a privileged third-party contractor account, accessed cloud-based patient management, document storage and EHR portals, and exfiltrated names, contact details, demographic, insurance and health information before a June 15 ransom demand. The attack was attributed to the ShinyHunters group, though the company no longer appears on the gang's extortion portal. Impacted individuals are being offered 12 months of free credit monitoring and identity protection.
- 4,115,802 individuals reported to HHS in breach submission
- Initial access via social engineering against a third-party contractor
- Data exfiltrated from cloud patient management and EHR systems
- Ransom demand on June 15 to prevent data leak
- Attributed to ShinyHunters; no misuse observed so far
- ATT&CK
- T1199 Trusted RelationshipT1078.004 Cloud AccountsT1567.002 Exfiltration to Cloud StorageT1657 Financial Theft
- Vendors
- AdaptHealth
- Products
- AdaptHealth EHR portals
- Threat actors
- ShinyHunters
- Victims
- AdaptHealth
- Organizations
- AdaptHealthHHSSEC
- Countries
- United States
From the original article
2 min read at bleepingcomputer.com
Healthcare company AdaptHealth has confirmed that data of 4. 1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.