Every public data breach

Disclosed this week47On record26,367

47 disclosed this week · 26,367 on record

Healthfirst Bluegrass

Disclosed Aug 26, 2026139,834 affectedConfirmed

Official notice

What is known

People affected139,834 (as reported by the organization)
DisclosedAug 26, 2026
DiscoveredAug 13, 2026
HappenedDec 18, 2025
AttackNot stated
Data exposedSocial Security numbersHealthDates of birthAddressesNames
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.my.site.com
Texas Attorney General data security breach report BR-0005285: Healthfirst Bluegrass
Official noticeago.vermont.gov
Vermont Attorney General breach report: Healthfirst Bluegrass
Official noticein.gov
Indiana Attorney General 2026 data breach report: Healthfirst Bluegrass

Notices filed

Residents of INAug 26
Indiana AG250 people
Residents of VTAug 27
Vermont AG5 people
Residents of TXAug 28
Texas AG312 people

Other breaches at Healthfirst Bluegrass

Hacking breachHacking exposed names and health records. Reported to the HHS archive.971 affectedHealthcareUSAug 21, 2020
History of this record
disclosed2026-10-02
2026-08-27 to 2026-08-26by dailySource
occurred2026-10-02
empty to 2025-12-18by dailySource
disclosed2026-09-25
2026-08-28 to 2026-08-27by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.

Everything about Healthfirst Bluegrass