ADVERTISEMENT

Hackers trick contractor to breach AdaptHealth and steal patient data

A successful social engineering attack allowed threat actors to steal passwords associated with insurance billing.

hacker-with-file

Image by Cybernews

Anna Zhadan
Anna Zhadan Contributor
Jul 4, 2026 Updated: 1 hour ago 1 min read
Key takeaways:
  • AdaptHealth said attackers used social engineering to access a third-party contractor session and enter its cloud business applications.
  • Hackers accessed patient management and document storage systems, stealing patient information and passwords tied to insurance billing.
  • The company said the breach was material and disclosed it to the SEC, though the full scope remains unknown.

Key Takeaways by nexos.ai, reviewed by Cybernews staff.

AdaptHealth, a US network of medical equipment companies, said threat actors used a social engineering attack to trick a third-party contractor, gaining access to the company's cloud environment and stealing patient data.

A successful social engineering attack compromised a user session associated with a third-party contractor, allowing attackers to gain access to some of the company's cloud-based business applications.

AdaptHealth said that upon detection, it had disabled the affected account, reset the credentials, and implemented additional access controls to contain the incident.

The company added that it determined on June 27th that the incident is material because of its nature and potential volume of the data at risk, requiring disclosure to the SEC.

More from Cybernews

sainsburys-facial-rec Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried? squatting ghost "Phantom squatting” uses AI hallucinated domains for cyber attacks physical media collection What they’re doing to gamers is a robbery in broad daylight The logo of Microsoft Teams, contours of shamrock Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it A UFO dissolving into an AI Can government AI actually scrub UAP footage from the internet? Apple CEO Tim Cook, right hand on heart, white male, grey white hair, left hand on heart The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe

According to the SEC filing, hackers accessed internal patient management systems and document storage platforms and stole passwords associated with insurance billing. The affected data also included certain personally identifiable information and protected health information of patients.

ADVERTISEMENT

In the filing, AdaptHealth noted that it doesn’t collect Social Security numbers from patients and doesn’t store individual financial account information or payment card information in those systems.

The company is currently working with external forensics teams to investigate the nature of the attack. The full scope of the breach and the volume of affected data have not yet been determined, but AdaptHealth said it had taken measures to prevent the potential dissemination of data.

As of now, no hacker group has claimed responsibility for the breach, and AdaptHealth did not specify whether it has received a ransom demand or made a payment.

“At this time, the Company is unable to determine the full financial impact of the incident, including remediation and response costs, legal, regulatory and notification-related matters, and possible effects on patients, counterparties and the Company’s reputation. The Company maintains cybersecurity insurance that may cover certain losses associated with the incident."
the SEC filing

Yet, AdaptHealth said that the incident did not disrupt its ability to serve patients.

ADVERTISEMENT