AdaptHealth discloses material cyber incident exposing patient data and insurance billing passwords
AdaptHealth said a threat actor gained unauthorized access to certain cloud-based business applications, including patient management and document storage systems, and exfiltrated some data. The company determined on June 27, 2026 that the incident is material, and said it has contained the threat and that operations and patient service have not been materially affected. The full financial impact, data scope and volume remain undetermined, and the company says cybersecurity insurance may cover some losses.
Key points
- Threat actor contacted the company on June 15, 2026, claiming to have obtained data from its systems
- Affected data includes insurance billing passwords and certain patient personally identifiable and protected health information
- Company does not collect Social Security numbers or store financial account or payment card data in the affected systems
- Company says it cannot yet determine the full financial impact and will amend the filing as information becomes available
The filing
Written by AI on Nov 8, 2026, 6:59 AM ET, from this filing only. Written later: this filing was briefed after the fact, when past filings were added to the site, so the brief may be read with hindsight; the filing itself is the record of what was known on July 02, 2026.
Briefs are written by AI from the filing text and can contain mistakes — open the filing before acting on anything. Impact (1-5) and tone are the AI's reading of the filing for shareholders, not a price forecast. Not investment advice.