AdaptHealth, a company that delivers home medical equipment and supplies — sleep-apnea machines, respiratory devices, oxygen therapy, hospital beds, and mobility aids — has confirmed that a July 2026 cyberattack exposed personal and health data belonging to 4.1 million people. The breach was attributed to the ShinyHunters threat group, which contacted AdaptHealth on June 15 to demand a ransom payment in exchange for not publishing the stolen files.
Attackers gained access through a social engineering attack that compromised a privileged account belonging to a third-party contractor. From there they moved through cloud-based business applications, internal patient management systems, document storage platforms, and electronic health record portals. The categories of data exposed include names and demographic information, health insurance information, and health information. AdaptHealth says it has found no evidence that the stolen data has been used for identity theft or fraud; the company’s entry also appears to have been removed from ShinyHunters’ extortion site, suggesting a ransom may have been paid or a separate agreement reached.
How to check if you’re affected
Affected products include home medical equipment subscriptions and services managed through AdaptHealth’s patient portals — including sleep therapy, respiratory therapy, oxygen therapy, and durable medical equipment programs. If you are a current or former AdaptHealth patient, watch your inbox: the company is sending breach notifications directly to affected individuals and offering free 12-month credit monitoring and identity protection enrollment. Even if you have not yet received a letter, it is prudent to enroll in credit monitoring now, review your health insurance Explanation of Benefits statements for unfamiliar claims, and consider placing a fraud alert with the major credit bureaus.