Virta Health Corp. and Virta Medical, PC data breach
Virta Health Corp. and Virta Medical, PC reported a data security incident in California, impacting individuals whose sensitive health and personal information was compromised. The breach, which occurred in March 2026, is currently under monitoring by state authorities, raising concerns about patient data security. Affected individuals received notification letters detailing the exposed information and next steps.
Docket sheet
- Company
- Virta Health Corp. and Virta Medical, PC
- Venue
- California Attorney General
- Filed
- August 31, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredMarch 19, 2026
Date of the incident as stated in the filing.
- 2
Reported to the California Attorney GeneralAugust 31, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Biometric and Health Log Data
Clerk's notes
Virta Health Corp. and Virta Medical, PC submitted a data security breach report to the California Attorney General on August 31, 2026, concerning an incident that took place on March 19, 2026. This report initiates an official record of the breach, which is currently categorized as 'monitoring' as investigations continue into its full scope and impact on patient data.
The compromised information includes highly sensitive personal and medical data. Specifically, individuals may have had their Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Biometric and Health Log Data exposed. The unauthorized access to such detailed health records can lead to risks like medical identity theft, fraudulent billing, and privacy violations.
As a healthcare provider and digital health platform operating in California, Virta Health Corp. and Virta Medical, PC are subject to stringent state and federal privacy regulations, including the Health Insurance Portability and Accountability Act (HIPAA), the California Confidentiality of Medical Information Act (CMIA), and the California Consumer Privacy Act (CCPA). A data breach often indicates a potential failure to uphold the rigorous security measures mandated by these laws to protect electronic protected health information (ePHI) and personally identifiable information.
Receiving an official data breach notification letter from Virta Health Corp. or Virta Medical, PC is a crucial step in understanding your rights. This letter formally acknowledges that your confidential information was compromised due to a security incident. If you have received such a notification, it confirms your standing to seek legal recourse. We invite you to request a free case review to understand how this breach might affect you.
If a notification letter about this breach reached you, see every California data breach on file or browse all cases.
Other California docket entries
- ZZ Diag ProbeCalifornia AG—Monitoring
- STS Aviation GroupCalifornia AGOctober 19, 2026Monitoring
- Citizens BankCalifornia AGOctober 19, 2026Monitoring
- John G. Yphantides, a Professional Law CorporationCA AGOctober 16, 2026Monitoring
- Neuro Wellness SpaCalifornia AGOctober 16, 2026Monitoring
- Frazer LLPCalifornia AGOctober 16, 2026Monitoring
- Covered CaliforniaCalifornia AGOctober 16, 2026Monitoring
- Inner City Education FoundationCA AGOctober 16, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.