Teollimi

Veradigm (formerly Allscripts) data breach

Was I affected?

Veradigm (formerly Allscripts) confirmed a breach affecting an undisclosed number of people, exposing names and Social Security numbers. You may be affected if your doctor or clinic uses Veradigm (Allscripts) software and you receive a notice about this incident.

Veradigm (formerly Allscripts) breach facts
AnnouncedSep 8, 2026
CountryUnited States
Data exposedNames, Social Security numbers and Other details
StatusConfirmed by the company or a regulator filing

What happened

Health IT company Veradigm, formerly Allscripts, told the SEC on September 8, 2026 that one of its third-party vendors had a cybersecurity incident affecting data tied to a small number of its customers. An attacker took credentials from the vendor's environment for a Veradigm API used to serve those customers and downloaded copies of patients' personal data, in some cases including Social Security numbers. Veradigm says no clinical or medical data was involved and the attacker could not reach its wider network. It has not said how many patients are affected; the Gentlemen ransomware group claims to hold 3.5 million patient records, which Veradigm has not confirmed. Affected customers and patients are being notified, with credit monitoring offered where applicable.

What should I do?

  1. If you get a notice, enroll in the credit monitoring it offers.
  2. Place a credit freeze with Equifax, Experian and TransUnion if your Social Security number was involved.
  3. Watch for calls or emails claiming to be from your doctor's office or a billing company that ask for payment or personal details; call the office back on a number you know.
  4. Review explanation-of-benefits statements from your insurer for care you didn't receive.
XRedditWhatsApp

More data breaches in the United States →

Check the other services you use →

Sources