Virta Health
Disclosed Jun 30, 20262 months ago602 affectedConfirmed
Virta Health reports unauthorized access to separate data repository
Virta Health notified patients that files in a data repository separate from its production platform were potentially accessed between March 19 and 22, 2026, exposing names together with other personal data elements. It reported the incident to law enforcement.
What is known
| People affected | 602 (as reported to HHS) |
|---|---|
| Disclosed | Jun 30, 2026 |
| Discovered | Mar 24, 2026 |
| Attack | Hacking |
| Data exposed | Names, Health, Other |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report: Virta Health (Business Associate, CO)ocrportal.hhs.gov · Official notice | Official notice |
| California AG breach report: Virta Healthoag.ca.gov · Regulator | Regulator |
| Virta Health sample noticeoag.ca.gov · Regulator | Regulator |
Notices filed
History of this record
- 2026-09-25 · data_types: ["names","health"] to ["names","health","other"] · seed source
- 2026-09-25 · discovered: empty to 2026-03-24 · seed source
- 2026-09-25 · summary: empty to Virta Health notified patients that files in a data repository separate from its production platform were potentially accessed between March 19 and 22, 2026, exposing names together with other personal data elements. It reported the inciden · seed source
- 2026-09-25 · title: empty to Virta Health reports unauthorized access to separate data repository · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.