Veradigm
Disclosed Sep 22, 20251 year ago2,672,036 affectedConfirmed
Stolen credentials expose Veradigm storage account data of 2.67M
Veradigm, formerly Allscripts, said credentials stolen in an incident at one of its customers were used around December 2024 to access a Veradigm storage account; it learned of it July 1, 2025 and began notifying people September 22. HHS lists 2,672,036 affected.
What is known
| People affected | 2,672,036 (as reported to HHS) |
|---|---|
| Disclosed | Sep 22, 2025 |
| Discovered | Jul 1, 2025 |
| Happened | Dec 15, 2024 |
| Attack | Vendor breach |
| Data exposed | Names, Health, Addresses, Dates of birth, Insurance, Financial, Social Security numbers, Government IDs |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Veradigmoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Veradigmatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Veradigmjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report: Veradigm (Business Associate, IL)ocrportal.hhs.gov · Official notice | Official notice |
| Largest Healthcare Data Breaches of 2025hipaajournal.com · News | News |
| Veradigm Announces Data Breach Affecting Several Customershipaajournal.com · News | News |
| Texas Attorney General data security breach report BR-0004743: Veradigmoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General: 2025-09-22 Veradigm Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Sep 22, 2025 | |
| HHS OCRtotal | Sep 22, 2025 | 2,672,036 |
| Researchtotal | Sep 22, 2025 | 2,672,036 |
| Vermont AGresidents of VT | Sep 22, 2025 | |
| Washington AGresidents of WA | Dec 2, 2025 | 845 |
| Oregon DOJresidents of OR | Dec 2, 2025 | 2,672,036 |
| California AGresidents of CA | Dec 18, 2025 | |
| Texas AGresidents of TX | Dec 19, 2025 | 43,684 |
Other breaches at Veradigm
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Veradigm discloses patient data breach after Gentlemen gang claims 3.5M recordsSep 82 weeks agoVendor breach | Sep 82 weeks ago | Vendor breach | Healthcare | Confirmed | Unknown |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-09-22-veradigm-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage · backfill source
- 2026-09-25 · attack: hacking to third-party · seed source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","addresses","dob","insurance","financial","ssn","government-id"] · seed source
- 2026-09-25 · summary: empty to Veradigm, formerly Allscripts, said credentials stolen in an incident at one of its customers were used around December 2024 to access a Veradigm storage account; it learned of it July 1, 2025 and began notifying people September 22. HHS li · seed source
- 2026-09-25 · title: empty to Stolen credentials expose Veradigm storage account data of 2.67M · seed source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2672036 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2025-07-01 · backfill source
- 2026-09-25 · disclosed: 2025-12-18 to 2025-09-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.