FEDERALItem 1.05 · mandatorySocial EngineeringHealthcareTechnologyHealthcarePhishingStolen CredentialsData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainSupply Chain (3P Vendor)CredentialsPIIPHILowContained

AdaptHealth Corp.

bd_bdea54b1108c7028 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 15, 2026

Filed

Jul 2, 2026

To disclose

17 days

Affected

Not disclosed

Linked

6 filings

Confidence

67%

Full breach record for AdaptHealth Corp. →

AdaptHealth Corp. filed an 8-K on June 27, 2026, disclosing a material cybersecurity incident. A threat actor gained unauthorized access to cloud-based business applications, including patient management systems, via a social engineering attack compromising a third-party contractor's session. The actor exfiltrated data including insurance billing passwords, PII, and PHI. The incident has been contained, law enforcement was notified, and the scope of affected individuals remains undetermined.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Jun 27, 2026 → Filed Jul 2, 20265d ✓ SEC 4-day OK17 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 18 days

Jun 15, 2026

Discovered

Jun 27, 2026

Scope determined

Jul 2, 2026

Filed

vs. sector median

9 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Washington State AGbd_2a63e7918c132c152026-08-14 · +42dVerified
California State AGbd_4e721acad23217052026-08-14 · +42dVerified
HHS OCRbd_dc9d666fdb7b14f22026-08-14 · +42dVerified
Texas State AGbd_dca8d9fe3c84e6e72026-08-14 · +42dVerified

Show 1 more filing ↓up to 42d gap

Vermont State AGbd_e8b8399c6e13ad642026-08-14 · +42dVerified

Name: AdaptHealth Corp.
norm: adapthealth
SEC CIK: 0001725255

Name: AdaptHealth Corp.
norm: adapthealth
SEC CIK: 0001725255
Industry: HealthcarellmTechnologyllm

Discovered: Jun 15, 2026
Materiality determined: Jun 27, 2026
Notification sent: —
Affected individuals: Not disclosed
Data types: CredentialsPIIPHI
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement
Initial access: phishing_link

During the incident: Activated its incident response procedures
Launched the investigation with the support of external advisors and cybersecurity experts
Notified law enforcement
Disabled the compromised user account
Resetting affected credentials
Implementing additional access controls
Changes made: Implementing additional access controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: SEC 4-day OK · 5d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Jun 27, 2026
→ Filed: Jul 2, 2026
5d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Jun 27, 2026 → Filed: Jul 2, 2026	5d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

SEC 8-KJul 2 · first · this page

Washington State AG+42d

California State AG+42d

HHS OCR+42d

Texas State AG+42d

Vermont State AG+42d

Pattern: first filing Jul 2, last Aug 14 (VT) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1725255/000110465926080297/ahco-20260627x8k.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jul 2, 2026
Raw hash: 797f9e5c05b647d09b90e35f12d5cf7a59cf5eba4d38958716663683c581f9ea

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html38.4 KB

Download View at source

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityAdaptHealth Corp.

Victim entityAdaptHealth Corp.

Incidentdiscovered Jun 15, 2026

Stated responseActivated its incident response procedures

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing