Med Atlantic

Disclosed Nov 21, 2025410,326 affectedConfirmed

The covered entity (CE), Med Atlantic, Inc., reported that it was the subject of a hacking attack that affected the protected health information (PHI) of 410,326 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS and the affected individual. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect its PHI.

What is known

People affected	410,326 (as reported to HHS)
Disclosed	Nov 21, 2025
Happened	Oct 27, 2025
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeago.vermont.gov

Vermont Attorney General: 2026-01-09 Med Atlantic Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2026 data breach report: Med Atlantic

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Med Atlantic (Business Associate, VA)

Notices filed

TotalNov 21, 2025

HHS archive410,326 people

Residents of INDec 26, 2025

Indiana AG1 person

Residents of VTJan 9

Vermont AGCount not stated

History of this record

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

1893 to 410326by backfillSource

disclosed2026-09-25

2025-12-26 to 2025-11-21by backfillSource

summary2026-09-25

empty to The covered entity (CE), Med Atlantic, Inc., reported that it was the subject of a hacking attack that affected the protected health information (PHI) of 410,326 individuals. The PHI involved included clinical, demographic, and financial inby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 1893by backfillSource

disclosed2026-09-25

2026-01-09 to 2025-12-26by backfillSource

occurred2026-09-25

empty to 2025-10-27by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Med Atlantic