Hipaajournal Photon Health Data Breach Exposes Patient Information
Article Content
- •Photon Health disclosed a data breach affecting patient information on October 8, 2026.
- •The breach was due to a zero-day vulnerability in the Metabase application exploited by the Direwolf ransomware group.
- •Compromised data includes personal and health-related information, but not Social Security numbers.
Photon Health, a Brooklyn-based healthcare technology company, disclosed a data breach on October 8, 2026, affecting patient data due to unauthorized access via a zero-day vulnerability in the Metabase application. The breach was discovered on August 21, 2026, after the Direwolf ransomware group claimed responsibility for the attack, stating they had obtained 63.3 GB of data. The compromised data includes names, addresses, phone numbers, birth dates, and prescription information, but Social Security numbers and financial data were not impacted. Photon Health began notifying affected individuals on October 8, 2026, and is offering complimentary credit monitoring services. The company is also reviewing its cybersecurity measures to prevent future incidents. The extent of the breach and the total number of affected individuals have not been disclosed.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Chaos and Any-Time Care in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of data were compromised?
How many individuals were affected?
What steps is Photon Health taking in response?
Continue Reading
Ransomware Attacks Target Multiple Companies in September 2026 In September 2026, multiple ransomware groups, including Booba Project and Panzer, launched attacks on various organizations. Atlas Ocean Voyages suffered a breach where 37 GB of sensitive data was stolen, while Cerámicas Kantu S.A.C. was threatened with data release unless negotiations occurred. The attacks highlight… 
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…