INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Epic Systems Experiences Data Breach

| 2026-09-09 17:03 CRITICAL HIGH DATA BREACH
JSON
Executive Summary
AI-generated
A breach occurred on 2026-09-09, where hackers infiltrated a vendor's systems and stole customer information including Social Security numbers from Veradigm, an electronic health records company that provides technology and management systems to thousands of hospitals and doctors worldwide. The Gentlemen ransomware gang claimed to have stolen the health records of approximately 3.5 million patients. An unauthorized party obtained credentials from the vendor's environment to access a specific interface, downloading copies of personal patient data, including Social Security numbers, without involving clinical or medical data. The breach was reported to law enforcement and did not result in operational disruptions; an investigation is ongoing.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
SamSamSamSam
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎December 2024
Boston Scientific reported a December 2024 cybersecurity incident that exposed health data of approximately 2,672,036 people.
industry Health
The company also reported a different cybersecurity incident in December 2025, telling the U.S. Department of Health and Human Services that 2,672,036 people had health data exposed during a breach in December 2024.
organisation the U.S. Department of Health and Human Services
The company also reported a different cybersecurity incident in December 2025, telling the U.S. Department of Health and Human Services that 2,672,036 people had health data exposed during a breach in December 2024.
general_metric 2,672,036 people
The company also reported a different cybersecurity incident in December 2025, telling the U.S. Department of Health and Human Services that 2,672,036 people had health data exposed during a breach in December 2024.
organisation CareCloud
Another 3.7 million people were impacted by a March cybersecurity incident involving electronic health records giant CareCloud and several other firms, including Paylogix announced cyberattacks over the last two weeks that involved patient and customer data.
organisation Paylogix
Another 3.7 million people were impacted by a March cybersecurity incident involving electronic health records giant CareCloud and several other firms, including Paylogix announced cyberattacks over the last two weeks that involved patient and customer data.
organisation Boston Scientific
In an updated SEC filing on Tuesday, medical device giant Boston Scientific confirmed that its previously announced cyberattack has continued to cause operational issues.
‎December 2025
The electronic health record company reported a different cybersecurity incident in December 2025, stating that the U.S. Department of Health and Human Services was notified about an exposure of health data for approximately 2,672,036 people during a breach in December 2024.
industry Health
The company also reported a different cybersecurity incident in December 2025, telling the U.S. Department of Health and Human Services that 2,672,036 people had health data exposed during a breach in December 2024.
organisation the U.S. Department of Health and Human Services
The company also reported a different cybersecurity incident in December 2025, telling the U.S. Department of Health and Human Services that 2,672,036 people had health data exposed during a breach in December 2024.
general_metric 2,672,036 people
The company also reported a different cybersecurity incident in December 2025, telling the U.S. Department of Health and Human Services that 2,672,036 people had health data exposed during a breach in December 2024.
‎2026/09/02
Threat actors exploited a security incident involving healthcare data migration company Aesto to leak sensitive information of approximately 12.8 million people, including medical testing records and laboratory test results.
industry Healthcare
Last week, healthcare data migration company Aesto said 9 million people had information leaked during a security incident and Baylor Genetics previously told federal regulators that more than 2.8 million people had medical testing information, laboratory test results and more stolen during a cyber incident in June .
organisation healthcare data migration
Last week, healthcare data migration company Aesto said 9 million people had information leaked during a security incident and Baylor Genetics previously told federal regulators that more than 2.8 million people had medical testing information, laboratory test results and more stolen during a cyber incident in June .
general_metric 9 people
Last week, healthcare data migration company Aesto said 9 million people had information leaked during a security incident and Baylor Genetics previously told federal regulators that more than 2.8 million people had medical testing information, laboratory test results and more stolen during a cyber incident in June .
general_metric 2.8 people
Last week, healthcare data migration company Aesto said 9 million people had information leaked during a security incident and Baylor Genetics previously told federal regulators that more than 2.8 million people had medical testing information, laboratory test results and more stolen during a cyber incident in June .
‎2026/09/09
The Gentlemen ransomware gang claimed to have stolen the health records of 3.5 million patients after obtaining credentials from Veradigm's environment and using them to download copies of certain personal patient data, including Social Security numbers.
organisation Veradigm
Electronic health records company Veradigm told regulators on Tuesday evening that hackers infiltrated a vendor’s systems and stole customer information including Social Security numbers.
organisation Social Security
Electronic health records company Veradigm told regulators on Tuesday evening that hackers infiltrated a vendor’s systems and stole customer information including Social Security numbers.
financial $594 world
Veradigm provides health record technology and management systems to thousands of hospitals and doctors across the world, reporting $594 million in revenue in 2024.
organisation Nutex
The group has launched hundreds of attacks since emerging last fall and recently attacked healthcare companies Nutex and AnMed .
organisation the U.S. Securities and Exchange Commission
“The unauthorized party used these credentials to download copies of certain personal data of patients, including, in some instances, Social Security numbers; no clinical or medical data was involved,” Veradigm explained in an 8-K filing with the U.S. Securities and Exchange Commission (SEC).
organisation SEC
“The unauthorized party used these credentials to download copies of certain personal data of patients, including, in some instances, Social Security numbers; no clinical or medical data was involved,” Veradigm explained in an 8-K filing with the U.S. Securities and Exchange Commission (SEC).
organisation Allscripts
Formerly known as Allscripts, Veradigm has experienced cybersecurity incidents in the past.
Tactical Metrics
Metrics
financial
594,000,000
World
Veradigm provides health record technology and management systems to thousands of hospitals and doctors across the world, reporting $594 million in revenue in 2024.
Intelligence Sources
TheRecord 2026-09-09