← One Medical

2026 One Medical Seniors — legacy Iora archive breach Jun 8–11; HHS OCR 153,174 patients

2026 153.2K records affected Share on X

Data compromised

Legacy Iora Health/One Medical Seniors demographic and clinical records (names, addresses, DOBs, contacts, SSNs, medical/treatment/diagnostic/imaging/prescription and Medicare/insurance details per AG/ClaimDepot summaries) for patients in nine U.S. metros; HHS OCR 153,174

Technical writeup

Verified company notice plus HHS OCR census — August 2026 update. Amazon-owned One Medical confirmed an unauthorized person accessed a third-party file-storage system holding archived One Medical Seniors (formerly Iora Health) patient data between June 8 and June 11, 2026 (discovered June 13). Incident limited to that archival platform — not other One Medical clinics or the main EMR. ClaimDepot (updated Aug 14, 2026) and class-action trackers cite HHS OCR total 153,174 individuals (e.g. ~10,041 Texas; ~5,410 Massachusetts), with mail notifications beginning June 29 and Experian IdentityWorks Credit 3B offered through activation codes. ShinyHunters claimed 8.8 TB on Tor around June 17 — actor volume still unverified by the company. Fields vary: demographics, SSNs, clinical/treatment/diagnostic/imaging/prescription and Medicare/insurance details. recordsAffected 153174 from HHS OCR via ClaimDepot.

Root cause

Unauthorized third party accessed third-party file storage holding archived One Medical Seniors (formerly Iora Health) patient data June 8–11, 2026; discovered June 13; parallel ShinyHunters 8.8TB extortion claim

References