Insightin Health

Disclosed Jan 16, 20261,949,534 affectedConfirmed

What is known

People affected	1,949,534 (as reported to HHS)
Disclosed	Jan 16, 2026
Discovered	Sep 23, 2025
Happened	Sep 17, 2025
Attack	Ransomware
Data exposed	NamesHealthInsuranceAddresses
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Insightin Health

Official noticeatg.wa.gov

Washington Attorney General breach notice: Insightin Health

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Insightin Health

Official noticeocrportal.hhs.gov

HHS OCR breach report: Insightin Health (Business Associate, MD)

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004895: Insightin Health

Official noticeago.vermont.gov

Vermont Attorney General: 2026-04-01 Insightin Health Inc.-Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2026-03-04 Insightin Health Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2026-01-28 Insightin Health Data Breach Notice to Consumers

Notices filed

TotalJan 16

HHS OCR1,949,534 people

Residents of VTJan 28

Vermont AGCount not stated

Residents of VTMar 4

Vermont AGCount not stated

Residents of CAMar 5

California AGCount not stated

Residents of WAMar 5

Washington AG11,740 people

Residents of ORMar 5

Oregon DOJ1,144,686 people

Residents of TXMar 10

Texas AG143,346 people

Residents of CAApr 1

California AGCount not stated

Residents of VTApr 1

Vermont AGCount not stated

History of this record

source2026-09-25

empty to https://ago.vermont.gov/document/2026-01-28-insightin-health-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2026-03-04-insightin-health-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2026-04-01-insightin-health-inc-data-breach-notice-consumersby backfillSource

data_types2026-09-25

["names","health"] to ["names","health","insurance","addresses"]by backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 1949534by backfillSource

disclosed2026-09-25

2026-03-05 to 2026-01-16by backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2025-09-23by backfillSource

disclosed2026-09-25

2026-04-01 to 2026-03-05by backfillSource

occurred2026-09-25

empty to 2025-09-17by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Insightin Health