AdaptHealth Data Breach: What Affected Patients Should Know Featured
AdaptHealth says a June 2026 cyberattack exposed personal and health information, prompting notification to affected patients and a new class action lawsuit.
AdaptHealth has disclosed a data breach involving patient information. The incident occurred in June 2026 and affected certain company systems.
AdaptHealth says an unauthorized person gained access to its systems on June 5, 2026. The company learned of the incident on June 15 after receiving a message from a threat actor.
The incident involved systems used to manage patient information and store documents. In addition, the attacker gained access to certain external electronic health record portals.
What Happened in the AdaptHealth Data Breach?
AdaptHealth reported the incident to the Securities and Exchange Commission on July 2, 2026.
According to the company, the incident resulted from a social-engineering attack. The attack compromised a user session connected to a third-party contractor.
AdaptHealth investigated the incident and determined that information had been removed from its systems. On June 27, the company concluded that the incident was material because of the type and possible amount of information involved.
AdaptHealth later began sending notice letters to affected individuals.
What Information Was Exposed?
AdaptHealth says the information involved may have included:
- Names
- Contact information
- Demographic information
- Health insurance information
- Health information
State data breach reports provide more detail about the information involved in some cases. For example, reported information included dates of birth, health insurance policy or identification numbers, medical information, and protected health information.
However, AdaptHealth says the breach did not involve Social Security numbers. It also says credit card, debit card, bank account, and other financial account information were not involved.
As of its August 14 notice, AdaptHealth said it was not aware of identity theft, fraud, or other misuse connected to the incident.
The company is offering affected individuals at least 12 months of complimentary identity protection services.
AdaptHealth Data Breach Lawsuit Filed
A class action lawsuit was filed against AdaptHealth Corp. on September 3, 2026. The case was filed in the U.S. District Court for the Eastern District of Pennsylvania.
The lawsuit alleges that AdaptHealth failed to reasonably protect patient information. It also alleges that the company did not provide timely notice of the breach.
These are allegations. They have not been proven in court.
The lawsuit includes claims for negligence, negligence per se, breach of implied contract, and unjust enrichment.
The proposed class includes people in the United States and its territories whose private information AdaptHealth identified as compromised in the breach.
What Should Affected Patients Do?
If you received an AdaptHealth data breach notice, keep a copy of the letter.
You should also review your health insurance statements and medical records. Watch for activity you do not recognize. In addition, be cautious about unexpected calls, emails, or text messages asking for personal information.
Affected patients may also have legal rights related to the breach.
If you received an AdaptHealth data breach notice, or believe your information was affected, please complete the form on this page.
The information you provide will help determine whether you may have a potential claim related to the AdaptHealth Data Breach. There is no cost or obligation to submit the form.