AdaptHealth told the SEC that social engineering against a contractor allowed thieves to steal patient PII, PHI, and an insurance billing password file. The firm activated its response plan on June 15, later deemed the breach material, and has applied extra safeguards while its investigation proceeds.
Social Security numbers and payment card information are not believed to have been taken.
The incident is the latest example of healthcare organizations facing compromise through trusted third-party relationships.
Healthcare organizations must treat contractor sessions as high-risk entry points given the prevalence of social engineering in cloud compromises.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Mathspace disclosed that attackers stole personal data belonging to 1,079,819 students, staff, and parents or guardians in Australia and New Zealand after breaching its Metabase system. The incident is the latest in a campaign exploiting a Metabase zero-day vulnerability used by multiple companies.
The FBI is investigating the dark web sale of scans from more than 153 million US and Canadian drivers licenses obtained via an ongoing breach at a Louisiana identity verification company. The incident underscores the lasting danger of stolen physical identity documents that cannot be reset like passwords and the growing scale of cyber-enabled identity theft.
ShinyHunters published data from 12.9 million genuine Carhartt accounts after the apparel company refused a $3.3 million ransom. The breach, which also exposed records for more than 15,000 employees, originated from Carhartt's Databricks analytics platform.
ShinyHunters obtained and later leaked personal data belonging to 1.6 million RingCentral accounts after a July breach. The incident touched only a limited portion of the cloud communications provider’s customers and left core services untouched.
Medical Computer Business Services disclosed a 2025 network breach that exposed the sensitive information of 1,261,464 people. The incident highlights risks to healthcare data aggregators that process patient records for multiple providers.
