---
title: "Data breach at Veradigm"
description: "Veradigm, a US healthcare technology vendor (electronic health records, e-prescribing), disclosed on September 8, 2026 an intrusion via compromised credentials at a third-party vendor, which granted access to an API reserved for customer services. The attacker copied personal data for a subset of pa"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-08-veradigm
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-08
dateModified: 2026-09-08
---
# Veradigm

Data breach — Critical

Veradigm, a US healthcare technology vendor (electronic health records, e-prescribing), disclosed on September 8, 2026 an intrusion via compromised credentials at a third-party vendor, which granted access to an API reserved for customer services. The attacker copied personal data for a subset of patients, including Social Security numbers; no clinical or medical data was affected. The Gentlemen ransomware group claimed the attack on September 5, 2026, alleging it holds about 3.5 million records (names, addresses, Social Security numbers, emails, phone numbers) — a volume not confirmed by Veradigm.

Social Security numbers exposed alongside names and addresses could enable identity theft or fraudulent account opening in victims' names.

| Fact | Value |
| --- | --- |
| Disclosed on | September 8, 2026 |
| Accounts affected | 3.5M |
| Sector | Healthcare |
| Country | United States |
| Cause | Third-party provider |
| Severity | Critical |
| Status | Confirmed |

## Exposed data

- Full name
- Postal address
- Phone number
- Email address
- Social security number

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Veradigm warns of patient data breach after ransomware gang claims attack](https://www.bleepingcomputer.com/news/security/veradigm-discloses-patient-data-breach-after-gentlemen-gang-claims-attack/) — Bleeping Computer
- [Veradigm Inc. - Form 8-K](https://www.sec.gov/Archives/edgar/data/0001124804/000119312526384471/mdrx-ex99_1.htm) — U.S. Securities and Exchange Commission
- [Healthcare Tech Company Veradigm Exposed in Third-Party Breach](https://www.securitymagazine.com/articles/102564-healthcare-tech-company-veradigm-exposed-in-third-party-breach) — Security Magazine
- [Veradigm Confirms Patient Data Exposed in Third-party Data Breach](https://cybersecuritynews.com/veradigm-patient-data-breach/) — Cybersecurity News

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-08-veradigm
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees