One Medical Seniors Data Breach Exposes Patient Records

One Medical Seniors disclosed a data breach on June 20, 2026, revealing unauthorized access to patient records stored on a third-party file-storage system. The breach, which occurred between June 8 and June 11, 2026, was attributed to a ransomware attack by the threat actor ShinyHunters, who claimed to have stolen 8.8 terabytes of data. Affected individuals include current and former patients of One Medical Seniors and legacy Iora Health clinics. The company has stated that other One Medical services and systems were not impacted. One Medical has taken steps to secure the affected system, including revoking user access and implementing additional safeguards. Patients will be notified by mail regarding the specifics of the compromised information. The investigation into the breach is ongoing.

Key Points: • Unauthorized access to One Medical Seniors patient records via a third-party file-storage system. • ShinyHunters claims to have stolen 8.8 terabytes of data, affecting legacy Iora Health patients. • One Medical has initiated an investigation and implemented security measures to prevent future breaches.