AdaptHealth Confirms Data Breach Affecting 4.1 Million People
Summary
AdaptHealth confirmed that a cyberattack exposed data belonging to 4,115,802 people. The intrusion began June 5 after social engineering compromised a third-party contractor account; the company found no evidence of data misuse.
Key points
- AdaptHealth reported that 4,115,802 people were affected by the breach.
- The company said the intrusion began June 5 and was discovered in July.
- Attackers used social engineering to compromise a privileged account belonging to a third-party contractor.
- The attackers accessed cloud-based business applications, patient management systems, document storage platforms, and electronic health record portals.
- Potentially exposed information included names, contact and demographic details, health insurance information, and health information.
- AdaptHealth said it found no evidence of identity theft, fraud, or other misuse; affected individuals were offered 12 months of credit monitoring and identity protection.
- ShinyHunters was linked to the attack in prior reporting based on a victim-listing claim, but BleepingComputer could not find AdaptHealth on the group’s extortion portal.
Article Details
- Victim Organization
- AdaptHealth
- Incident Type
- Cyberattack involving social engineering and compromise of a third-party contractor account, followed by access to company systems and data exfiltration.
- Incident Date
- 2026-06-05
- Disclosure Date
- 2026-07-02
- Data Types Exposed
- Full names
- Contact information
- Demographic information
- Health insurance information
- Health information
- Affected Records
- 4,115,802 individuals
- Operational Impact
- Attackers accessed cloud-based business applications, internal patient management systems, document storage platforms, and electronic health record system portals. AdaptHealth reported no evidence of identity theft, fraud, or other misuse of the stolen data.
- Ransom Or Extortion
- On June 15, an unnamed threat actor demanded ransom in exchange for not leaking the stolen data. The source does not report whether AdaptHealth paid.
- Claim Status
- confirmed