Firstsource Healthplans and Healthcare Services, LLC, a healthcare technology service provider, disclosed a programming error on its platform that potentially exposed protected health information and standalone Social Security numbers. The vulnerability was active from July 16, 2025, to January 15, 2026, and was discovered on May 18, 2026. Firstsource engaged forensic investigators, patched the vulnerability, and offered credit monitoring. No evidence of misuse was found.