Veradigm patient data leaked through misuse of partner credentials
Attackers used credentials obtained from a partner company's environment to access Veradigm's API and copy patients' personal information. The attacking group claimed to have stolen 3.5 million records and threatened to publish the data. The company has not determined the number of people affected and said no clinical or medical information was included.
Key facts
- Affected organisation
- Veradigm
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Patients' personal information; number of people affected not determined
- Cause / method
- Unauthorised access to the API using credentials obtained from a partner's environment
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- A Veradigm data leak linked to a partner breach became known.
- Veradigm disclosed the leak of patients' personal information, saying the number of people affected had not been determined and that no clinical or medical information was included.
5 related reports
- Healthcare Tech Company Veradigm Exposed in Third-Party Breach
- Veradigm Discloses Third Party Data Breach as Hackers Threaten to Publish Data
- Veradigm Data Breach: Gang Claims 3.5M Records [2026]
- Veradigm reports third-party vendor cyberattack
- Veradigm data breach exposes patient information after third-party vendor hack
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.