Skip to content
Blueberry Medical Suffers Security Incident via Metabase Vulnerability

Blueberry Medical Suffers Security Incident via Metabase Vulnerability

First seen 10 Oct 2026, 03:36 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 10, 2026 at 04:38 UTC
  • •Unauthorized access to Blueberry Medical's Metabase environment occurred on August 10, 2026.
  • •Personal information, including health records, may have been exposed during the incident.
  • •Blueberry Medical has implemented enhanced security measures following the breach.

On August 10, 2026, Blueberry Medical experienced unauthorized access due to a critical vulnerability in the Metabase platform. The breach, linked to broader exploitation of the Metabase vulnerability, was detected on August 22, prompting an incident-response process. Blueberry terminated unauthorized access within an hour and preserved relevant logs. The incident may have exposed personal information, including names, health plan details, and medical records. Blueberry has since strengthened its security measures, including enhanced authentication and increased security reviews. Law enforcement and a cybersecurity firm were engaged for further investigation. The Metabase platform was confirmed to be running a non-vulnerable version at the time of detection.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-10
Unauthorized access detected
An unauthorized actor exploited a critical vulnerability in the Metabase platform to gain administrator access.
Morningstar
2026-08-22
Breach detected
Blueberry Medical detected the unauthorized access and initiated its incident-response process.
Morningstar

More articles in this cluster (2)

Following this threat?

Track Blueberry Medical in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What information may have been exposed?
The incident may have exposed names, health plan names, policy numbers, dates of birth, and medical records.
What steps has Blueberry taken since the breach?
Blueberry has strengthened authentication, enhanced monitoring for vendor vulnerabilities, and increased security review frequency.
Who should I contact for more information?
For inquiries, you can call Blueberry Medical at 888-752-8498 or email [email protected].