Insightin Health
Disclosed Jan 16, 20268 months ago1,949,534 affectedConfirmed
What is known
| People affected | 1,949,534 (as reported to HHS) |
|---|---|
| Disclosed | Jan 16, 2026 |
| Discovered | Sep 23, 2025 |
| Happened | Sep 17, 2025 |
| Attack | Ransomware |
| Data exposed | Names, Health, Insurance, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Insightin Healthoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Insightin Healthatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Insightin Healthjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Insightin Health (Business Associate, MD)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0004895: Insightin Healthoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2026-04-01 Insightin Health Inc.-Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2026-03-04 Insightin Health Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2026-01-28 Insightin Health Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Jan 16 | 1,949,534 |
| Vermont AGresidents of VT | Jan 28 | |
| Vermont AGresidents of VT | Mar 4 | |
| California AGresidents of CA | Mar 5 | |
| Washington AGresidents of WA | Mar 5 | 11,740 |
| Oregon DOJresidents of OR | Mar 5 | 1,144,686 |
| Texas AGresidents of TX | Mar 10 | 143,346 |
| California AGresidents of CA | Apr 1 | |
| Vermont AGresidents of VT | Apr 1 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-01-28-insightin-health-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-03-04-insightin-health-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2026-04-01-insightin-health-inc-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","insurance","addresses"] · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1949534 · backfill source
- 2026-09-25 · disclosed: 2026-03-05 to 2026-01-16 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2025-09-23 · backfill source
- 2026-09-25 · disclosed: 2026-04-01 to 2026-03-05 · backfill source
- 2026-09-25 · occurred: empty to 2025-09-17 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.