Virta Health Corp. and Virta Medical, PC (Department of Health And Human Services) data breach

Clerk's notes

Virta Health Corp. and Virta Medical, PC, companies specializing in digital healthcare for chronic disease management, disclosed a data breach to the Department of Health and Human Services (HHS) on September 3, 2026. While the specific nature of the breach remains unspecified in the public filing, it signals a compromise within their digital infrastructure, which processes and stores extensive patient data due to their telehealth and clinical services. This incident prompted a filing with the Washington Attorney General, indicating regulatory scrutiny of the event.

The compromised information included a broad range of highly sensitive personal and health data. Specifically, the exposed data types are Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such comprehensive medical and identifying information poses significant risks, including potential medical identity theft, fraudulent use of health benefits, and broader identity theft concerns for affected individuals.

As healthcare providers, Virta Health and Virta Medical, PC are subject to strict data protection laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the Washington Health My Data Act. These regulations mandate robust safeguards for electronic protected health information. The occurrence of a breach often suggests potential vulnerabilities in a company's security protocols, raising questions about whether these legal obligations were fully met in protecting patient privacy.

If you have received a data breach notification letter from Virta Health Corp. or Virta Medical, PC, it means your personal information was involved in this incident. Receiving such a notification establishes your standing to seek legal review regarding the compromise of your data. Our firm is currently investigating potential legal claims related to this breach, and we offer free case reviews to help affected individuals understand their options. There is no cost to you unless we successfully recover compensation.

If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.