VirtaHealth
ent_8d163e93b48301ea
Disclosures
4
HHS OCR · State AG · Leak Site · 3 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
14,636
nationwide · HHS OCR CO
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- VirtaHealth
- Normalized
- virtahealth— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- virtahealth.com
Disclosure history (4)newest first
- COHHS OCRas victim2026-06-30
Virta Health reported to HHS on 2026-06-30 a Hacking/IT Incident affecting 602 individuals. Breached information located on Network Server.
- 🐻California State AGas victim2026-06-12
Virta Health Corp. notified the California AG of a security incident where unauthorized activity was identified on March 24, 2026, in a data repository separate from the production platform. The incident involved potential access to files between March 19 and March 22, 2026. Exposed data included names, Social Security numbers, dates of birth, and medical information (diagnoses, treatments, record numbers). Virta engaged external cybersecurity experts, notified law enforcement, and is offering 12 months of complimentary credit monitoring and fraud assistance to affected individuals. No indication of misuse was found.
- COHHS OCRas victim2026-05-23
Virta Medical PC reported to HHS on 2026-05-23 a Hacking/IT Incident affecting 14636 individuals. Breached information located on Network Server.
- GLOBALLeak Siteas victim2026-03-29
Healthcare research