Blueberry Pediatrics

Blueberry Pediatrics based in Mountain View, California, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-09-10 and reported on 2026-10-13. 60,581 Texas residents were affected. 340,915 individuals affected in total. Types of information involved: Name of individual;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Blueberry Pediatrics based in Mountain View, California, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-09-02 and reported on 2026-10-13. 7,249 Texas residents were affected. 47,381 individuals affected in total. Types of information involved: Name of individual;Address;Medical Information;Health Insurance Information;Other. Consumers were notified via U.S. Mail.

Blueberry Medical discovered on August 22, 2026, that a previously unknown vulnerability in its third-party technology provider Metabase was exploited by an unauthorized actor. The exploitation resulted in unauthorized access to Blueberry Medical's Metabase environment and the theft of patient data between August 9 and August 12, 2026. Affected data included names, health plan information, dates of birth, and medical records (PHI). Social Security Numbers and payment information were not involved. Blueberry Medical contained the incident, patched systems, changed credentials, and engaged forensic investigators. The incident also affected a separate provider, Photon, via the same vulnerability.

Blueberry Medical discovered on August 22, 2026, that a previously unknown vulnerability in its third-party technology provider Metabase was exploited, resulting in the theft of patient PHI including names, health plan info, dates of birth, and medical records. SSNs and payment info were not involved. The company contained the incident, patched systems, and engaged forensic investigators.

Blueberry Pediatrics reported a data breach to the Oregon Attorney General. The breach was reported on 2026-10-10. The breach occurred during 8/10/2026 - 8/22/2026. The breach was discovered on 8/26/2026. 340,915 individuals were affected. Notice was sent on 10/9/2026.