AdaptHealth Data Breach Impacts Over 4.1 Million Individuals' Health Information
Healthcare company AdaptHealth has reported a data breach affecting more than 4.1 million individuals, compromising their personal, health, and insurance information. The breach occurred in early June when a threat actor gained unauthorized access to AdaptHealth's cloud-based applications, including internal systems used for patient management and document storage. The company, which operates over 680 facilities across the U.S., confirmed the data theft, which included a password file associated with insurance billing. AdaptHealth stated that the hacker used social engineering to compromise a user session at a third-party contractor. On August 14, the company notified the U.S. Department of Health and Human Services (HHS) about the incident, confirming that names, contact and demographic information, and health and health insurance information were exfiltrated. However, AdaptHealth clarified that Social Security numbers and financial information were not affected in this particular breach. The HHS recently...