Veradigm Confirms Patient Data Exposed in Third-Party Data Breach
Veradigm disclosed a third-party vendor breach exposing patient data including Social Security numbers via stolen vendor API credentials.
Veradigm filed an 8-K with the SEC on September 8, 2026, disclosing that attackers used credentials stolen from a third-party vendor to access a specific vendor-facing API and download patient personal data, including Social Security numbers for some individuals. No clinical or medical information was compromised, and Veradigm's internal infrastructure was not breached directly. The company activated incident response, notified law enforcement, and is offering credit monitoring to affected individuals.
- Stolen credentials from a vendor granted access to a Veradigm API
- Social Security numbers exposed; no clinical data compromised
- Veradigm filed a Form 8-K with the SEC on September 8, 2026
- Company activated incident response and began customer notification
- Vendors
- Veradigm
- Products
- Veradigm API
- Victims
- Veradigm customers
- Organizations
- SEC
- Countries
- United States
From the original article
2 min read at cybersecuritynews.com
Healthcare technology company Veradigm Inc. disclosed that a cybersecurity incident at one of its third-party vendors exposed sensitive patient data, including Social Security numbers, for a limited group of the company’s customers. The disclosure, filed with the U.
By Kavichselvan · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.