2026 Quantum Health — May 29 vishing; network access May 29–Jun 1; patient PHI/SSNs (count TBD)
Data compromised
Names, addresses, emails, phones, DOBs, demographics, SSNs, diagnosis/treatment, prescriptions, provider names, dates of service, insurance and claims/benefits information (confirmed Jun 8)
Technical writeup
Verified Quantum Health disclosures — HIPAA Journal / CA AG sample notice. Attacker vished a Quantum Health user May 29, 2026; unauthorized access and file acquisition through June 1; outage same day. June 8 confirmation that exfiltrated files included PHI and SSNs among other fields. Credit monitoring offered. National individual census not published at indexing. Tactics resemble ShinyHunters-style vishing noted in Health-ISAC alerts, but Quantum did not name the actor. recordsAffected 0; companyConfirmed true.
Root cause
Vishing call on May 29, 2026 tricked a user into providing network access; unauthorized party acquired files May 29–Jun 1; network disruption Jun 1
References
- https://www.hipaajournal.com/quantum-health-precision-imaging-centers-heart-america-data-breaches/
- https://oag.ca.gov/ecrime/databreach/reports/sb24-628342
- https://www.federmanlaw.com/blog/quantum-health-inc-data-breach-investigated-by-federman-sherwood/
- https://www.dapeer.com/databreaches/quantum-health-data-breach-investigation