Veradigm

Disclosed Sep 22, 20252,672,036 affectedConfirmed

Stolen credentials expose Veradigm storage account data of 2.67M

Veradigm, formerly Allscripts, said credentials stolen in an incident at one of its customers were used around December 2024 to access a Veradigm storage account; it learned of it July 1, 2025 and began notifying people September 22. HHS lists 2,672,036 affected.

What is known

People affected	2,672,036 (as reported to HHS)
Disclosed	Sep 22, 2025
Discovered	Jul 1, 2025
Happened	Dec 15, 2024
Attack	Vendor breach
Data exposed	NamesHealthAddressesDates of birthInsuranceFinancialSocial Security numbersGovernment IDs
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Veradigm

Official noticeatg.wa.gov

Washington Attorney General breach notice: Veradigm

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Veradigm

Official noticeocrportal.hhs.gov

HHS OCR breach report: Veradigm (Business Associate, IL)

Newshipaajournal.com

Largest Healthcare Data Breaches of 2025

Newshipaajournal.com

Veradigm Announces Data Breach Affecting Several Customers

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004743: Veradigm

Official noticeago.vermont.gov

Vermont Attorney General: 2025-09-22 Veradigm Data Breach Notice to Consumers

Notices filed

Residents of CASep 22, 2025

California AGCount not stated

TotalSep 22, 2025

HHS OCR2,672,036 people

TotalSep 22, 2025

Research2,672,036 people

Residents of VTSep 22, 2025

Vermont AGCount not stated

Residents of WADec 2, 2025

Washington AG845 people

Residents of ORDec 2, 2025

Oregon DOJ2,672,036 people

Residents of CADec 18, 2025

California AGCount not stated

Residents of TXDec 19, 2025

Texas AG43,684 people

Other breaches at Veradigm

Veradigm discloses patient data breach after Gentlemen gang claims 3.5M recordsVendor breach exposed names, addresses, Social Security numbers, emails and phone numbers.Vendor breachHealthcareUSSep 8

History of this record

source2026-09-25

empty to https://ago.vermont.gov/document/2025-09-22-veradigm-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPageby backfillSource

attack2026-09-25

hacking to third-partyby seedSource

data_types2026-09-25

["names","health"] to ["names","health","addresses","dob","insurance","financial","ssn","government-id"]by seedSource

summary2026-09-25

empty to Veradigm, formerly Allscripts, said credentials stolen in an incident at one of its customers were used around December 2024 to access a Veradigm storage account; it learned of it July 1, 2025 and began notifying people September 22. HHS liby seedSource

title2026-09-25

empty to Stolen credentials expose Veradigm storage account data of 2.67Mby seedSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 2672036by backfillSource

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2025-07-01by backfillSource

disclosed2026-09-25

2025-12-18 to 2025-09-22by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Veradigm