AdaptHealth says attackers stole patient data
Healthcare equipment provider AdaptHealth confirmed that attackers stole patient health data and passwords in a data breach. The company disclosed that sensitive personal and medical information was compromised, affecting patients who use its home medical equipment and supplies.
Background
- AdaptHealth is a large US supplier of home medical equipment (CPAP machines, oxygen concentrators, ventilators, hospital beds). It serves millions of patients, mostly through Medicare/Medicaid and private insurance.
- Attackers stole employee credentials (usernames/passwords) to access internal systems containing protected health information — names, SSNs, diagnoses, insurance details, and equipment orders.
- This reflects a broader pattern: US healthcare vendors are increasingly targeted because they hold sensitive data but often have weaker security than large hospitals.
- Under US law (HIPAA), AdaptHealth must notify affected patients and federal regulators. Breaches of this scale often trigger class-action lawsuits and FTC investigations.