AdaptHealth breach stole patient data

Attackers used social engineering to compromise an unwitting third-party contractor and access AdaptHealth cloud systems. The intruders accessed internal patient management platforms, document storage tools, external electronic health record portals, and business applications holding sensitive information on June 15. They exfiltrated personally identifiable information and protected health data including a password file associated with insurance billing while disabling the compromised user account.