Unverified claim — June 18, 2026: The ShinyHunters extortion group listed One Medical—the primary-care network Amazon acquired in 2023—claiming 8.8 terabytes of stolen corporate data and a June 22, 2026 negotiation deadline. BreachHistory indexes the actor listing at One Medical ShinyHunters 2026 with recordsAffected 0 pending verification.
What is verified vs. claimed
DataBreaches.net and National CIO Review emphasized:
- ShinyHunters had not published sample data to substantiate the 8.8TB figure at initial reporting.
- One Medical and Amazon had not confirmed the ShinyHunters listing.
- The scope of any potentially affected patient or employee data was unclear.
One Medical operates clinics and virtual care nationally; a confirmed breach at this scale would rank among the largest 2026 health-sector incidents—but that status is not established yet.
Separate legacy Iora notice
Press coverage noted One Medical previously disclosed a different, limited third-party storage incident affecting archived legacy Iora Health patient files—not the same as the ShinyHunters 8.8TB marketing claim. Do not conflate the two events when assessing personal risk.
Patient guidance
- Wait for official One Medical or Amazon communications—not leak downloads.
- Be skeptical of SMS or email citing real appointment details until verified.
- Monitor credit and enable MFA on patient portal accounts proactively.
Canonical record: One Medical 2026 unverified claim on BreachHistory.
Sources: DataBreaches.net, National CIO Review