4.1 Million Impacted by AdaptHealth Data Breach
AdaptHealth data breach impacts over 4.1 million individuals, exposing health and insurance information.
Healthcare company AdaptHealth suffered a data breach in early June 2026, impacting over 4.1 million individuals. Hackers gained access to cloud-based applications, including patient management and document storage systems, and exfiltrated names, contact information, and health and insurance details. The breach was initiated through social engineering targeting a third-party contractor.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AdaptHealth?
Get an email when a new story names AdaptHealth, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe AdaptHealth breach originated when attackers used social engineering to compromise a third-party contractor, who then served as a pivot point into sensitive cloud-based patient management and document storage systems. This highlights the critical weakness of extending implicit trust to vendors and contractors without enforcing the same rigorous security controls applied to internal staff. Healthcare organizations are high-value targets due to the richness of the data they hold — combining PII, health records, and insurance details — all of which carry significant regulatory and financial consequences when exposed. The breach underscores that perimeter defenses are only as strong as the least-secured third party with access to your environment.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.