Quantum Health, Inc.

Quantum Health, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-28. The reporting organization type is Health Care. 2,360 Vermont residents were affected. Categories of data breached: Social Security Numbers, Health Records.

Quantum Health, Inc. based in Dublin, Ohio, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-07-27 and reported on 2026-10-28. 273,111 Texas residents were affected. 1,911,559 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

Quantum Health, Inc. based in Dublin, Ohio, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-07-27 and reported on 2026-08-18. 68,451 Texas residents were affected. 625,945 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

Quantum Health, Inc. detected unauthorized access to its IT network resulting from a user responding to a vishing call on May 29, 2026. The unauthorized party accessed and acquired files between May 29 and June 1, 2026. The incident involved health information, insurance details, and personal data, with possible Social Security number exposure. Quantum Health secured systems, engaged forensics, notified law enforcement, and is offering identity monitoring.

Quantum Health, Inc., a health sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2026-06-01 and filed notice on 2026-08-14. 5,909 Washington residents were affected. 74 days elapsed between awareness and notification. 6 days to identify the breach. 0 days to contain the breach.

Quantum Health, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2026-08-14. The breach occurred during 5/29/2026 - 6/1/2026. The breach was discovered on 6/1/2026. 184,376 individuals were affected. Notice was sent on 8/14/2026.

Quantum Health, Inc. experienced a data breach resulting from a vishing attack on May 29, 2026. An unauthorized party accessed and acquired files containing health information, insurance details, and personal data (including potential SSNs) between May 29 and June 1, 2026. The incident was detected on June 1, 2026. Quantum Health secured systems, engaged forensics, notified law enforcement, and is offering identity monitoring to affected individuals.

Quantum Health, Inc. notified Massachusetts residents of a data breach involving unauthorized access to its IT network. The incident was triggered by a vishing call on May 29, 2026, leading to the exfiltration of personal and health information, including SSNs and insurance details. The breach was discovered on June 1, 2026, and notifications were sent on July 8, 2026. Quantum Health engaged forensic experts and is offering complimentary identity monitoring services.

Quantum Health reported to HHS on 2026-07-29 a Hacking/IT Incident affecting 2104 individuals. Breached information located on Network Server.

Quantum Health, Inc. notified the New Hampshire Attorney General of a data security incident involving unauthorized access to healthcare navigation systems. The breach, resulting from a vishing call on May 29, 2026, exposed names, health insurance info, medical data, and potentially SSNs for 5 NH residents. Notifications were mailed on July 29, 2026, offering credit monitoring.

QUANTUM HEALTH, INC. filed a data-breach notice with the Illinois Attorney General in July 2026 (case 26-07-1359). The register records the breach as discovered on June 1, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.