AdaptHealth Corp. is currently investigating a cybersecurity breach that resulted in unauthorized access to its systems, leading to the exfiltration of certain data. The breach, identified as a material incident on June 27, 2026, involved unauthorized access to cloud-based business applications, including internal patient management systems. The breach was reportedly initiated by a social engineering attack targeting a third-party contractor’s user session. Exfiltrated data includes passwords linked to insurance billing and some personally identifiable and protected health information of patients. However, Social Security numbers and financial account details were not compromised. The company has implemented containment measures, such as disabling compromised accounts and resetting credentials, and continues to work with external forensics teams to assess the breach’s scope. While operations remain unaffected, the full financial impact is still undetermined. AdaptHealth holds cybersecurity insurance that may cover some losses related to this incident. The company is committed to updating stakeholders as more information becomes available.
Was patient data compromised in AdaptHealth’s cybersecurity breach?
