2026 Insightin Health — 142K+ records (GoAnywhere, Medusa)
Data compromised
Names, DOB, health insurance IDs, Medicare identifiers, provider information
Technical writeup
Insightin Health disclosed breach in March 2026 affecting 142,000+ people. Unauthorized access Sept 17–23, 2025 via vulnerability in GoAnywhere file-transfer software. Medusa ransomware claimed responsibility. 378 GB exfiltrated. Exposed: member names, DOB, health insurance IDs, Medicare Beneficiary Identifiers, provider information. Second security incident in two years (prior: misconfigured database Jan 2024).
Root cause
GoAnywhere file-transfer vulnerability; Medusa ransomware