Massive OpenLoop Health Data Breach Affects Over 700k Individuals
Data Breach at Telehealth Platform Impacts Over 700,000 Individuals
In a significant incident reported to the US Department of Health and Human Services’ breach portal in recent weeks, a data breach at telehealth platform OpenLoop Health compromised the sensitive information of over 716,000 individuals.
Breach Details
- The breach occurred in early January 2026.
- The intrusion began on January 7, when an unauthorized third-party accessed certain OpenLoop systems.
- The attackers removed personal information including names, addresses, dates of birth, and medical data.
- However, the attackers did not gain access to patients’ electronic health records, Social Security numbers, or financial account information.
According to official notification letters filed with the Attorney General’s offices in California and Texas, “the incident was promptly disclosed to regulatory bodies in March, but the scope of the impact became clear only recently.”
OpenLoop Health responded promptly to the incident, terminating the unauthorized access and launching an investigation assisted by external cybersecurity specialists. The company bolstered its security controls and collaborated with law enforcement agencies. While t
