Cryptelio

Hacks & Exploits

Data Breach at AdaptHealth Affects Over 4 Million Patients in Pennsylvania

Cryptelio Editorial Published 10 Sep 2026 · 12:15 UTC

A Pennsylvania-based healthcare provider, AdaptHealth, has disclosed a data breach that has compromised the personal and health information of approximately 4,115,802 individuals. According to the U.S. Department of Health and Human Services, the breach was a result of a cyberattack that occurred on June 5, 2026, and was discovered on June 15, 2026.

The unauthorized access involved cloud-based systems, where files containing names, contact details, demographic information, health insurance data, and health information were stolen. However, AdaptHealth clarified that Social Security numbers and financial information were not included in the breach.

In response to the incident, AdaptHealth has taken immediate action by notifying affected patients and providing complimentary identity protection services, including credit monitoring, for at least 12 months. The company stated that it is not aware of any actual or attempted identity theft or fraud resulting from the breach.

The breach has been linked to the ShinyHunters threat group, prompting AdaptHealth to notify law enforcement and initiate a thorough investigation.

FAQ

What personal information was compromised in the AdaptHealth data breach?

The breach compromised names, contact details, demographic information, health insurance data, and health information of approximately 4.1 million individuals. However, Social Security numbers and financial information were not included.

When did the data breach at AdaptHealth occur?

The data breach occurred on June 5, 2026, and was discovered on June 15, 2026.

What steps has AdaptHealth taken in response to the data breach?

AdaptHealth has notified affected patients and is providing complimentary identity protection services, including credit monitoring, for at least 12 months.

Is there any evidence of identity theft or fraud resulting from the breach?

AdaptHealth stated that it is not aware of any actual or attempted identity theft or fraud resulting from the breach.

Which group is believed to be responsible for the AdaptHealth data breach?

The breach has been linked to the ShinyHunters threat group.

Read story →