AdaptHealth Data Breach Affects Over 4.1 Million Patients

• •Over 4.1 million patients affected by AdaptHealth data breach.
• •Attack vector involved social engineering targeting a third-party contractor.
• •No Social Security numbers or financial data were compromised.

In June 2026, AdaptHealth, a Pennsylvania-based medical equipment supplier, suffered a significant data breach affecting over 4.1 million patients. The breach was initiated through social engineering that compromised a third-party contractor's credentials, allowing unauthorized access to patient management systems and document storage platforms. The compromised data included names, demographic information, health insurance details, and health information, but did not include Social Security numbers or financial information. AdaptHealth notified affected individuals and offered free identity protection services through Kroll. The breach was disclosed in an SEC Form 8-K filing, and the ShinyHunters cybercrime group claimed responsibility for the attack. As of now, there is no evidence of the compromised information being misused, but individuals are advised to monitor their accounts for suspicious activity.