VirtaHealth
ent_8d163e93b48301ea
Disclosures
6
State AG · HHS OCR · Leak Site · 5 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
14,636
nationwide · HHS OCR CO
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- VirtaHealth
- Normalized
- virtahealth— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- virtahealth.com
Disclosure history (6)newest first
- South Carolina State AGas reporting2026-09-03
Virta Health Corp. and Virta Medical, PC notified individuals that unauthorized activity was identified on March 24, 2026, in a data repository separate from their production platform. The incident involved potential access to files between March 19, 2026, and March 22, 2026. Exposed information included first and last name and other personal data elements. Virta Health secured the environment, engaged external cybersecurity experts, and notified law enforcement. Complimentary credit monitoring and fraud assistance are being offered.
- Massachusetts State AGas reporting2026-09-01
Virta Health Corp. and Virta Medical, PC notified Massachusetts residents of a data security incident. On March 24, 2026, Virta identified unauthorized activity in a separate data repository. The investigation revealed that certain files were potentially accessed between March 19, 2026, and March 22, 2026. Exposed information included first and last name, potentially combined with other personal data elements. Virta secured the environment, engaged external cybersecurity experts, and notified law enforcement. Complimentary credit monitoring and fraud assistance services are being offered to affected individuals.
- COLORADOHHS OCRas victim2026-06-30
Virta Health reported to HHS on 2026-06-30 a Hacking/IT Incident affecting 602 individuals. Breached information located on Network Server.
- California State AGas victim2026-06-12
Virta Health Corp. notified the California AG of a security incident where unauthorized activity was identified on March 24, 2026, in a data repository separate from the production platform. The incident involved potential access to files between March 19 and March 22, 2026. Exposed data included names, Social Security numbers, dates of birth, and medical information (diagnoses, treatments, record numbers). Virta engaged external cybersecurity experts, notified law enforcement, and is offering 12 months of complimentary credit monitoring and fraud assistance to affected individuals. No indication of misuse was found.
- COLORADOHHS OCRas reporting2026-05-23
Virta Medical PC reported to HHS on 2026-05-23 a Hacking/IT Incident affecting 14636 individuals. Breached information located on Network Server.
- GLOBALLeak Siteas victim2026-03-29
Healthcare research