A breach at AdaptHealth, a US medical equipment network spanning more than 680 sites, exposed personal, health and insurance data on over 4.1 million people. AdaptHealth’s filing with the Department of Health and Human Services puts the count at 4,115,802, and the case appeared on the agency’s breach portal this week.
Per AdaptHealth, the entry point came in early June when social engineering let the attackers hijack a contractor’s user session. That foothold opened cloud applications, among them internal tools for managing patients and storing documents. The haul included a password file tied to insurance billing.
Stolen records covered names, contact and demographic data, along with health and insurance information. AdaptHealth says the breach did not touch Social Security numbers or financial information.
The same portal update carried another large case: clinical genomics firm Baylor Genetics, also breached in June, reported 2,810,878 individuals. Names, birth dates, test results, insurance details and Social Security numbers were taken there, along with employee personal and financial records.
