Breachesby GlyphVITAS Hospice Services
Disclosed Nov 19, 2025319,177 affectedConfirmed
Compromised vendor account exposes 319,177 VITAS hospice patients
VITAS, the largest US for-profit hospice chain, said an attacker used a compromised vendor account to access its systems between September 21 and October 27, 2025 and view and download patient information; it identified the breach October 24.
What is known
| People affected | 319,177 (as reported to HHS) |
|---|---|
| Disclosed | Nov 19, 2025 |
| Discovered | Oct 24, 2025 |
| Happened | Sep 21, 2025 |
| Attack | Vendor breach |
| Data exposed | NamesHealthOtherSocial Security numbersInsuranceDates of birthAddresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: VITAS Hospice ServicesHHS OCR breach report: VITAS Hospice Services (Healthcare Provider, FL)November 2025 Healthcare Data Breach ReportVITAS Hospice Services Discovers Month-Long Network Intrusion Affecting 319K PatientsTexas Attorney General data security breach report BR-0004683: VITAS Hospice Services
Notices filed
History of this record
["names","health","other"] to ["names","health","other","ssn","insurance","dob","addresses"]by backfillSource
hacking to third-partyby seedSource
["names","health"] to ["names","health","other"]by seedSource
empty to 2025-10-24by seedSource
empty to VITAS, the largest US for-profit hospice chain, said an attacker used a compromised vendor account to access its systems between September 21 and October 27, 2025 and view and download patient information; it identified the breach October 2by seedSource
empty to Compromised vendor account exposes 319,177 VITAS hospice patientsby seedSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 319177by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.