Skip to content
One Medical Seniors Data Breach Exposes Patient Records

One Medical Seniors Data Breach Exposes Patient Records

First seen 20 Jun 2026, 22:48 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster June 21, 2026 at 22:34 UTC
  • Unauthorized access to One Medical Seniors patient records via a third-party file-storage system.
  • ShinyHunters claims to have stolen 8.8 terabytes of data, affecting legacy Iora Health patients.
  • One Medical has initiated an investigation and implemented security measures to prevent future breaches.

One Medical Seniors disclosed a data breach on June 20, 2026, revealing unauthorized access to patient records stored on a third-party file-storage system. The breach, which occurred between June 8 and June 11, 2026, was attributed to a ransomware attack by the threat actor ShinyHunters, who claimed to have stolen 8.8 terabytes of data. Affected individuals include current and former patients of One Medical Seniors and legacy Iora Health clinics. The company has stated that other One Medical services and systems were not impacted. One Medical has taken steps to secure the affected system, including revoking user access and implementing additional safeguards. Patients will be notified by mail regarding the specifics of the compromised information. The investigation into the breach is ongoing.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 92d ago How this analysis works

Timeline

2026-06-08
Unauthorized access begins
An unauthorized party gained access to the third-party file-storage system used by One Medical Seniors.
Claimdepot
2026-06-11
Unauthorized access ends
The unauthorized access to patient files lasted approximately three days before being discovered.
Claimdepot
2026-06-13
Breach discovered
One Medical learned of the unauthorized access and began securing the affected system.
Claimdepot
2026-06-17
Data claim posted on dark web
ShinyHunters claimed on the dark web to have stolen over 8.8 TB of data from One Medical.
Classaction
2026-06-20
Public disclosure of breach
One Medical issued a security event notice detailing the breach and its impact on patients.
www.onemedical.com

More articles in this cluster (7)

Following this threat?

Track ShinyHunters and 1Life Healthcare in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed