Veradigm Data Breach Investigation

Chimicles Schwartz Kriner & Donaldson-Smith LLP is investigating potential class action claims against Veradigm Inc. (“Veradigm”) following the company’s disclosure of a cybersecurity incident involving one of its third-party vendors that resulted in the unauthorized acquisition of certain patients’ personal information.

Veradigm is a Chicago-based healthcare technology company that provides clinical, revenue-cycle, data, and technology solutions to healthcare providers, health plans, and life-sciences companies.

What Happened at Veradigm?

On September 8, 2026, Veradigm filed a Form 8-K with the U.S. Securities and Exchange Commission disclosing that one of its third-party vendors had experienced a cybersecurity incident affecting data associated with a small number of Veradigm customers.

According to Veradigm, an unauthorized party obtained credentials from the vendor’s environment for a Veradigm application programming interface, or API, that the vendor used to provide services on behalf of Veradigm customers. The unauthorized party then used those credentials to download copies of certain personal information belonging to patients.

Veradigm states that the compromised credentials provided access only through the limited API and did not provide access to the company’s broader network, servers, databases, or other systems. The company also reported that the incident did not disrupt its operations.

Veradigm has initiated its cybersecurity incident-response procedures, notified law enforcement, and continues to investigate the incident.

What Information Was Compromised?

Veradigm has confirmed that certain patient personal information was downloaded by the unauthorized party and that Social Security numbers were involved in some instances.

The company has not yet publicly identified all categories of information affected or disclosed the total number of individuals impacted.

Why Is This Important?

Social Security numbers and other identifying information can be used to facilitate identity theft, fraudulent financial accounts, phishing schemes, impersonation, account takeover, tax fraud, and other forms of identity-related crime. Unlike passwords or payment-card numbers, Social Security numbers generally cannot simply be changed after exposure.

What Should You Do?

If you are a patient, customer, healthcare provider, employee, or other individual who received a notice stating that your personal information was affected by the Veradigm cybersecurity incident, please contact our data breach attorneys by completing the form below to learn more about your potential legal rights and our ongoing investigation.

Veradigm Data Breach (#962)

First Name

Last Name

Address

Address Line 1

City

State

Zip Code

Phone

Have you received a notice, communication, email, letter, phone call, text message, or other notification stating that your information may have been affected by the Veradigm cybersecurity incident?

How did you learn about the Veradigm cybersecurity incident? (Check all that apply.)

As you selected "other" to the question above, please provide additional details:

What is or was your relationship to Veradigm? (Check all that apply.)

As you selected "other" to the question above, please provide additional details:

Have you gotten an increase in spam or junk calls, texts, and emails recently?

Have you experienced any unauthorized activity, fraud, or identity theft that you believe is related to this breach?

If you answered yes to the above, please briefly describe the suspicious activity or fraud you experienced:

Please provide any additional details about your experience:

(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.

Veradigm Data Breach Investigation

Haverford Office

Delaware Office

Awards

Site Map