Medical equipment supplier’s cloud applications breached, leaking patient data to hackers

July 9, 2026 - 05:45

AdaptHealth, a major U.S. supplier of home medical equipment, has confirmed that hackers broke into its cloud applications after stealing login credentials from one of its vendors through a phishing attack. The breach, which the company disclosed in a filing with regulators, allowed unauthorized access to systems containing patient information.

The intrusion was made possible when an outside vendor fell victim to a phishing scheme, giving attackers the ability to log into AdaptHealth's network using compromised credentials. Once inside, the hackers accessed cloud-based applications that store sensitive data. The company stated that the stolen information may include protected health information, though it is still working to determine the exact scope of what was taken.

AdaptHealth said it detected the breach quickly and took steps to secure its systems, including resetting credentials and reviewing access logs. The company is notifying affected individuals and regulators as required by law. This incident underscores the growing risk of supply chain attacks, where criminals target smaller vendors to gain access to larger healthcare organizations. For patients, the breach raises concerns about the security of medical records, insurance details, and other personal data stored by third-party suppliers.