Veradigm warns of patient data breach after ransomware gang claims attack

Veradigm, a healthcare technology company, disclosed a data breach resulting from a cybersecurity incident at a third-party vendor, which led to unauthorized access to patient data via compromised API credentials. The Gentlemen ransomware group claimed responsibility, stating they exfiltrated 3.5 million patient records containing personally identifiable information, including names, addresses, Social Security numbers, and email addresses. The group threatens to leak the data if a ransom is not paid, with a deadline of September 11, 2026. While clinical data was not accessed, the breach involved sensitive personal information, and Veradigm has initiated incident response procedures and customer notifications.

AI-extracted · verify before operational use