Chemed Corporation

On October 24, 2025, VITAS Healthcare (a Chemed subsidiary) discovered that a compromised third-party vendor account attempted to deploy an attacker tool in its IT environment. Protected health information of current and former patients was viewed and exfiltrated. On October 29, a threat actor demanded payment to prevent data release; VITAS paid and obtained deletion assurances. Incident contained; cyber insurance covered costs above a $500,000 deductible.