- Date
- 4 Nov 2026
- Place
- United States
- Who
- Blossom Health · Healthcare / Medical Clinic
- The way in
- Not stated by the source
- Source
- HIPAA Journal
01 · What was reported
What was reported.
Blossom Health confirmed a threat actor downloaded a limited number of patient medical records and a user spreadsheet containing patient information. Exposed data included names, contact details and health insurance information, but not financial information or Social Security numbers.
Check my firm
See your own firm the way an attacker reads it.
We read your domain from public records and show each way in with a check anyone can re-run.
02 · Source
Source.
Source: HIPAA Journal ↗This page repeats what the source reported, with its date. It says nothing about any firm that is not named in it.