OpenLoop Health Data Breach Affects 716,000 People
Summary
OpenLoop Health reported that an unauthorized third party accessed its systems Jan. 7–8 and removed personal and medical information affecting 716,000 people. A threat actor reportedly claimed 1.6 million records; the company says no misuse is known.
Key points
- OpenLoop Health discovered the intrusion on Jan. 7, 2026; the unauthorized party reportedly accessed systems between Jan. 7 and Jan. 8.
- The company’s notification letters say the intruder removed information affecting 716,000 people.
- The exposed information included names, addresses, email addresses, birth dates, and medical data.
- OpenLoop said electronic health records, Social Security numbers, and financial account information were not accessed.
- The company said it terminated the access, investigated with external cybersecurity specialists, improved security controls, and coordinated with law enforcement.
- OpenLoop said it was unaware of misuse and offered affected individuals one year of identity and credit monitoring.
- The responsible actor has not been identified by the company; a threat actor reportedly claimed to have stolen information belonging to 1.6 million people.
Article Details
- Victim Organization
- OpenLoop Health
- Incident Type
- Unauthorized access to systems and theft of personal and medical information
- Incident Date
- 2026-01-07
- Data Types Exposed
- Names
- Addresses
- Email addresses
- Birth dates
- Medical data
- Affected Records
- 716,000 individuals
- Affected Data Size
- Not disclosed
- Operational Impact
- The unauthorized party accessed OpenLoop systems between January 7 and January 8, 2026, and removed information. OpenLoop said it terminated the access, investigated with external cybersecurity specialists, improved security controls, and coordinated with law enforcement. The incident did not involve electronic health records, Social Security numbers, or financial account information. OpenLoop said it was not aware of misuse of the stolen information.
- Ransom Or Extortion
- No ransom or extortion demand is reported. An unidentified threat actor reportedly claimed the attack and said they stole information belonging to 1.6 million individuals; that claim is distinct from the 716,000 individuals reported as impacted.
- Claim Status
- confirmed