Skip to content
Dorsata Inc. Reports Data Security Incident Involving Metabase Software

Dorsata Inc. Reports Data Security Incident Involving Metabase Software

First seen 21 Oct 2026, 22:10 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 22:39 UTC
  • •Dorsata's data incident involved a vulnerability in Metabase software.
  • •Patient information may have been exposed, but no misuse has been reported.
  • •Dorsata has implemented security patches and notified affected individuals.

Dorsata, Inc. has notified patients of a data security incident linked to a vulnerability in the Metabase software. The incident may have exposed protected health information of patients between August 10 and August 12, 2026. Dorsata received notice of the vulnerability on August 12, promptly patched the software, and initiated an investigation with cybersecurity experts. The investigation revealed that unauthorized access to the database platform storing medical information occurred during the specified dates. Affected information includes names, addresses, patient IDs, and medical histories, but not social security numbers or financial data. Dorsata began sending notification letters to potentially affected individuals on October 21, 2026, providing details and protective resources. The company has established a toll-free call center for inquiries related to the incident. Dorsata emphasizes the importance of patient information security and has taken measures to prevent future incidents.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-12
Dorsata receives notice of vulnerability
Dorsata was informed of a security vulnerability in Metabase software and patched it immediately.
Morningstar
2026-10-21
Notification letters sent to affected patients
Dorsata began notifying individuals whose information may have been compromised, providing resources for protection.
Morningstar

More articles in this cluster (2)

Following this threat?

Track Metabase in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 2

Common questions

What patient information was compromised?
The compromised information includes names, addresses, patient IDs, and medical histories, but not social security numbers or financial data.
What steps has Dorsata taken in response?
Dorsata patched the vulnerability, initiated an investigation, and began notifying affected individuals.
How can affected individuals protect their information?
Dorsata's notification letters include resources and steps for individuals to take to safeguard their information.