AdaptHealth

Disclosed Jul 2, 20264,115,802 affectedConfirmed

AdaptHealth confirms 4,115,802 people exposed after contractor account hijack

Home medical equipment provider AdaptHealth told the SEC that social engineering compromised a third-party contractor's privileged account in June 2026, followed by a ransom demand. It later reported 4,115,802 affected people to HHS; ShinyHunters was named as the attacker.

What is known

People affected	4,115,802 (as reported to HHS)
Disclosed	Jul 2, 2026
Discovered	Jun 15, 2026
Happened	Jun 5, 2026
Attack	Phishing
Data exposed	NamesHealthEmailsPhone numbersAddressesInsuranceDates of birth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: AdaptHealth

Official noticeatg.wa.gov

Washington Attorney General breach notice: AdaptHealth

Official noticeocrportal.hhs.gov

HHS OCR breach report: AdaptHealth (Healthcare Provider, PA)

SEC filingsec.gov

AdaptHealth Corp. Form 8-K, Item 1.05 (2026-07-02)

Official noticeadapthealth.com

AdaptHealth notice of cybersecurity incident

Newsbleepingcomputer.com

AdaptHealth confirms 4.1 million people exposed in July cyberattack

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005258: AdaptHealth

Official noticeago.vermont.gov

Vermont Attorney General breach report: AdaptHealth

Notices filed

TotalJul 2

SEC 8-KCount not stated

TotalJul 2

Research4,115,802 people

Residents of CAAug 14

California AGCount not stated

Residents of WAAug 14

Washington AG9,214 people

TotalAug 14

HHS OCR4,115,802 people

Residents of TXAug 14

Texas AG143,454 people

Residents of VTAug 14

Vermont AG48,090 people

History of this record

source2026-09-25

empty to https://ago.vermont.gov/categories/security-breach-noticesby backfillSource

data_types2026-09-25

["names","health","emails","phone","addresses","insurance"] to ["names","health","emails","phone","addresses","insurance","dob"]by backfillSource

attack2026-09-25

hacking to phishingby seedSource

data_types2026-09-25

["names","health"] to ["names","health","emails","phone","addresses","insurance"]by seedSource

summary2026-09-25

empty to Home medical equipment provider AdaptHealth told the SEC that social engineering compromised a third-party contractor's privileged account in June 2026, followed by a ransom demand. It later reported 4,115,802 affected people to HHS; ShinyHby seedSource

title2026-09-25

Material cybersecurity incident reported to the SEC (8-K Item 1.05) to AdaptHealth confirms 4,115,802 people exposed after contractor account hijackby seedSource

disclosed2026-09-25

2026-08-14 to 2026-07-02by backfillSource

title2026-09-25

empty to Material cybersecurity incident reported to the SEC (8-K Item 1.05)by backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 4115802by backfillSource

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2026-06-15by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about AdaptHealth