← BAYADA Home Health Care

2026 BAYADA Home Health Care — Doctor Alliance vendor breach; 9,526 clients (Nov 2025)

2026 9.5K records affected Share on X

Data compromised

Per BAYADA and Vermont AG notice: names, DOB, diagnoses, treatment information, provider and insurance data, prescriptions, hospital admissions/discharges, disability information; SSNs for a subset

Technical writeup

Verified vendor incident — disclosed Feb. 2, 2026. BAYADA Home Health Care, a New Jersey-based home-health provider operating in 22 U.S. states, said third-party vendor Doctor Alliance notified it Dec. 4, 2025 of unauthorized access to Doctor Alliance systems during Oct. 31–Nov. 6, 2025 and Nov. 14–17, 2025. Doctor Alliance facilitates physician signatures on Home Health Certifications and Plans of Care with access to client PHI. BAYADA said its own systems were not compromised but Home Health Certification and Plan of Care forms for a limited number of clients may have been acquired; unauthorized access could not be ruled out. ClaimDepot summarized 9,526 affected individuals nationwide (1,665 Massachusetts, at least six New Hampshire). BAYADA discontinued Doctor Alliance and reported to state AGs and HHS OCR. Distinct from BAYADA's separate Feb.–Mar. 2026 direct network intrusion.

Root cause

Third-party vendor Doctor Alliance network intrusion (Oct 31–Nov 6 and Nov 14–17, 2025); Home Health Certification and Plan of Care forms

References

Breaches you may like