GoKawiilVeradigm confirms patient data breach tied to vendor credential theft
Veradigm, the Chicago-based healthcare technology firm formerly known as Allscripts, disclosed in an SEC filing that an attacker used stolen credentials from a third-party vendor to access a customer-service API and copy patient data. The exposed information includes personal details and Social Security numbers for a limited number of patients, though clinical records were not accessed. The Gentlemen ransomware group has claimed responsibility for the attack.
GoKawiil's interpretation of the reporting above, not reported fact.
Veradigm's software underpins electronic health records and billing systems for thousands of U.S. medical practices, so even a narrow breach through a vendor's credentials highlights how third-party access points remain a persistent weak link in healthcare cybersecurity. Exposure of Social Security numbers raises identity-theft risks for patients even when medical data itself stays protected, and the incident adds to a growing list of ransomware groups targeting healthcare supply chains.
- Attackers used stolen vendor credentials to access a limited Veradigm API, not its core network.
- Exposed data includes personal information and Social Security numbers, but not clinical records.
- The Gentlemen ransomware group has claimed the attack, though Veradigm hasn't confirmed the attacker's identity.
Aura Identity Theft Protection subscription — When a breach exposes Social Security numbers, credit and identity monitoring is the practical next step. Aura bundles identity theft monitoring with alerts so you can spot misuse of your personal data early, which is exactly the risk patients face after the Veradigm vendor incident.
See Aura Identity Theft Protection subscription on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-09
Published there as: “Veradigm warns of patient data breach after ransomware gang claims attack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.