Veradigm Data Breach Exposes Patient Information via Vendor Compromise

• •Veradigm disclosed a data breach affecting patient information via a third-party vendor.
• •The Gentlemen ransomware group claimed responsibility, threatening to leak data if ransom is not paid.
• •No clinical data was involved, and the breach did not disrupt operations.

Veradigm, a healthcare technology company, reported a data breach involving a third-party vendor's systems, where hackers accessed personal data, including Social Security numbers, of some patients. The breach was disclosed in an 8-K filing with the SEC on September 8, 2026. The unauthorized party obtained credentials from the vendor's environment for an API used to provide services for Veradigm customers. The breach did not involve clinical or medical data and affected a limited number of customers. Veradigm stated that there were no operational disruptions and that the investigation is ongoing. The Gentlemen ransomware group claimed responsibility for the breach, alleging they hold 3.5 million patient records. Veradigm has begun incident-response procedures and notified law enforcement. The company has offered credit-monitoring services to affected individuals. This incident follows a history of cybersecurity issues for Veradigm, which was previously attacked by the SamSam ransomware gang in 2019.