Blueberry Pediatrics Data Breach Investigation
Blueberry Pediatrics is a Mountain View, California-based virtual pediatric care service offering families access to pediatricians through remote consultations, home diagnostic tools, and prescription services.
What Happened at Blueberry Pediatrics?
On August 22, 2026, Blueberry Medical discovered unauthorized access to its Metabase environment, a third-party software platform used for reporting and data analysis. According to the company, an unauthorized party exploited a software vulnerability on August 10, 2026, obtained administrator access, and stole a copy of certain patient data.
Blueberry also disclosed a separate incident involving Photon, its prescription service provider. A different unauthorized party reportedly exploited the same Metabase vulnerability to obtain patient information from Photon between August 9 and August 12, 2026. Photon notified Blueberry of that incident on August 24, 2026.
Blueberry publicly announced its incident on October 9, 2026. According to the disclosures, the potentially affected information may have included:
- Names
- Dates of birth
- Health plan names and policy numbers
- Medical records
- Dates of service
- Medical codes
- Charges for medical services
Why Is This Important?
The exposure of children’s personal, health insurance, and medical information can create risks of medical identity theft, insurance-related fraud, and targeted phishing schemes. Medical records and prescription information can also reveal private details about a child’s health and treatment.
Sensitive health information cannot simply be replaced like a password or payment card. Affected families may face ongoing privacy concerns and spend time reviewing insurance statements, monitoring for suspicious activity, and addressing potential misuse of their children’s information.
What Should You Do?
If you received a notice stating that your child’s personal or health information may have been compromised in the Blueberry Pediatrics or related Photon data breach, please contact our data breach attorneys by completing the form below to learn more about your potential legal rights and our ongoing investigation.
This is a questionnaire created by the law firm of Chimicles Schwartz Kriner & Donaldson-Smith LLP (CSK&D) to investigate potential claims related to this data breach. Your answers will be screened, and you may be contacted if your responses match certain criteria.
When you submit this form, it will not automatically collect your details like name and email address unless you provide it yourself.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
