INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Photon Health and Healthcare Highways Announce Data Security Incidents

| 2026-10-13 15:06 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A recent data security incident was reported by Photon Health, a New York-based healthcare technology company, in March 2026. The entity behind the attack is not disclosed but the Chaos ransomware group claimed responsibility and exfiltrated 235 GB of data. Any-Time Home Care, a New York-based home health agency, also disclosed an incident in March 2026, while Healthcare Highways, a Texas-based medical provider network company, was affected between July 22 and July 27, 2026. The types of data compromised include names, addresses, phone numbers, birth dates, prescription information, Social Security numbers, patient ID numbers, procedure codes, diagnoses, claims information, health insurance information, and payment for healthcare services. Photon Health confirmed that complimentary credit monitoring and identity theft protection services have been offered to the affected individuals, while Healthcare Highways is still reviewing its data review process.
Technical Mitigations AI-generated
• Patch Metabase to address the zero-day vulnerability exploited by the threat actor. • Monitor for signs of Chaos ransomware activity, such as unusual network traffic or file encryption. • Implement a robust data backup and recovery process to minimize potential data exfiltration.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope technologytechnology healthhealth
Incident Timeline
‎March 2026
Ransomware was used to target Any-Time Home Care.
tactic Ransomware
Any-Time Home Care The New York-based home health agency Any-Time Home Care has recently disclosed a ransomware attack that was identified in March 2026.
organisation Any-Time Home Care
Any-Time Home Care The New York-based home health agency Any-Time Home Care has recently disclosed a ransomware attack that was identified in March 2026.
‎March 17, 2026
An unauthorized third party accessed the network of Photon Health on or around March 17, 2026, and encrypted files.
industry Health
General Document Context
industry Technology
General Document Context
‎July 22, 2026
Healthcare Highways announced a data security incident on July 22, 2026, involving potential breaches of sensitive health information.
industry Health
General Document Context
industry Technology
General Document Context
‎between July 22, 2026
An unauthorized third party gained access to Healthcare Highways' network between July 22, and July 27, 2026.
‎July 27, 2026
The Chaos ransomware group claimed responsibility for exfiltrating 235 GB of data from Healthcare Highways' network between July 22 and July 27, 2026.
industry Health
General Document Context
industry Technology
General Document Context
data_breach 235 GB
While the group behind the attack was not disclosed, the Chaos ransomware group claimed responsibility and says it exfiltrated 235 GB of data.
‎August 4, 2026
Threat actors exploited a vulnerability in Healthcare Highways' systems to compromise sensitive data on August 4, 2026.
industry Health
General Document Context
industry Technology
General Document Context
‎August 21, 2026
Photon Health discovered a previously unknown security flaw in its self-hosted Metabase application, which was exploited on August 21, 2026.
industry Health
General Document Context
industry Technology
General Document Context
organisation Metabase
Photon Health learned on August 21, 2026, that a previously unknown security flaw in a self-hosted third-party application called Metabase had been exploited.
‎September 4, 2026
Photon Health confirmed that data compromised in the incident included names, addresses, phone numbers, birth dates, and prescription information.
industry Health
General Document Context
industry Technology
General Document Context
‎October 8, 2026
The Direwolf ransomware and data extortion group claimed responsibility for the attack on Photon Health, prompting notification letters to be mailed to affected individuals starting October 8, 2026.
industry Health
General Document Context
industry Technology
General Document Context
organisation Direwolf
The Direwolf ransomware and data extortion group claimed responsibility for the attack.
‎Oct 13, 2026
Photon Health, a Brooklyn-based healthcare technology company, disclosed unauthorized access to patient data.
industry Health
General Document Context
industry Technology
General Document Context
organisation healthcare technology company Photon Health
Photon Health; Healthcare Highways Announce Data Security Incidents Posted By Steve Alder on Oct 13, 2026 Data breaches have been announced by the New York-based healthcare technology company Photon Health, the Texas-based medical provider network company Healthcare Highways, and the New York-based home health agency Any-Time Home Care.
organisation Any-Time Home Care.
Photon Health; Healthcare Highways Announce Data Security Incidents Posted By Steve Alder on Oct 13, 2026 Data breaches have been announced by the New York-based healthcare technology company Photon Health, the Texas-based medical provider network company Healthcare Highways, and the New York-based home health agency Any-Time Home Care.
organisation Photon Health Photon Health
Photon Health Photon Health, a Brooklyn, New York-based healthcare technology company that operates a prescription network, has disclosed a cybersecurity incident involving unauthorized access to patient data.
‎2026/10/13
Photon Health announced a data security incident involving the compromise of sensitive patient information, including names, addresses, and Social Security numbers.
organisation Photon Health
Photon Health; Healthcare Highways Announce Data Security Incidents.
organisation Announce Data Security Incidents
Photon Health; Healthcare Highways Announce Data Security Incidents.
organisation Social Security
The review of the affected data is ongoing; however, it has been determined that the types of data compromised in the incident include names, addresses, dates of birth, dates of service, Social Security numbers, patient ID numbers, procedure codes and costs, procedure/provider information, diagnoses, claims information, health insurance information, and information related to payment for healthc…
Tactical Metrics
Metrics
data_breach
235
Gb
While the group behind the attack was not disclosed, the Chaos ransomware group claimed responsibility and says it exfiltrated 235 GB of data.
Intelligence Sources
HIPAA Journal 2026-10-13