AdaptHealth confirms 4.1 million people's data exposed in ShinyHunters breach
AdaptHealth has confirmed that a cyberattack discovered in July, linked to the ShinyHunters group, exposed personal and health data belonging to about 4.1 million patients. The company says attackers gained access on June 5 through a social engineering attack that compromised a third-party contractor's privileged account, reaching cloud-based patient management and record systems. Exposed data includes names, contact and demographic details, health insurance information, and health records.
GoKawiil's interpretation of the reporting above, not reported fact.
The breach highlights how third-party contractor access remains a major weak point in healthcare cybersecurity, since attackers didn't need to breach AdaptHealth directly. With millions of patients' medical and insurance data exposed, affected individuals face heightened risk of identity theft and targeted scams even though no misuse has been confirmed yet.
- 4.1 million patients' data was exposed via a compromised third-party contractor account.
- The breach, tied to ShinyHunters, was first disclosed in July after occurring in June.
- AdaptHealth is offering free credit monitoring but has found no evidence yet of data misuse.
Yubico YubiKey 5 NFC Security Key — This breach started with a social-engineered account takeover — exactly the attack a hardware security key is built to stop. The YubiKey 5 NFC plugs into USB-A or taps your phone over NFC to provide phishing-resistant two-factor login for accounts like Google, Microsoft, and password managers, so a stolen code or password alone isn't enough.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-09
Published there as: “AdaptHealth confirms 4.1 million people exposed in July cyberattack”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.