Adapthealth CorpCyberattack exposed patient data, leading to regulatory and legal risks.

AdaptHealth has disclosed a June cyberattack that exposed patient data, including password files and protected health information. The home-based medical device provider said a threat actor contacted the company on June 15 claiming to have obtained data from its systems. The breach occurred through a social engineering attack that compromised a user session of a third-party contractor, granting access to cloud-based applications. AdaptHealth stated that no Social Security numbers, financial account details, or payment card information were exposed, as such data was not stored in the affected systems. The company has contained the incident and is continuing to investigate the full scope of the exfiltrated data.
Adapthealth CorpCyberattack exposed patient data, leading to regulatory and legal risks.