Breaches · 48 days ago
AdaptHealth confirmed that a July cyberattack exposed data on about 4.1 million people, and the company said the incident is tied to ShinyHunters. The story is not about a vulnerable product or a patchable flaw; it is about the size and sensitivity of the healthcare records that left the company’s control.
When patient and billing data are exposed at this scale, the damage often shows up later as identity theft, privacy loss, and fraud against patients and providers, even after the breach itself is contained. The practical question now is who can use those records downstream, not how to fix a specific system.
For healthcare organizations and business associates, this is a reminder that a breach can become a long-tail records problem, with exposure persisting in claims, identity, and fraud channels long after the initial intrusion is over.
3 sources covering this story
ShinyHunters expose 6.4M in attack on medical supplier McKesson
Have I Been Pwned logs leaked records spanning patients, staff, and providers
4.1 Million Impacted by AdaptHealth Data Breach
In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems.
AdaptHealth confirms 4.1 million people exposed in July cyberattack
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group.
Part of the PlainSec briefing for 2026-09-11