Healthcare technology company Veradigm has disclosed a data breach after an attacker obtained login credentials from one of its third-party vendors and used them to access a customer-service API. Through that interface, the attacker copied patient records containing personal details and Social Security numbers. Veradigm — formerly known as Allscripts Healthcare Solutions — provides electronic health records, e-prescribing, and practice-management software to thousands of hospitals, clinics, and biopharmaceutical firms across the United States.
The company says the vendor’s compromised credentials gave access only through that limited API and did not reach Veradigm’s broader network, servers, or databases. Clinical and medical information was not exposed. Veradigm has notified law enforcement, launched an investigation, and is contacting affected patients with credit-monitoring services where applicable. The disclosure was filed with the U.S. Securities and Exchange Commission on September 8, 2026.
The Gentlemen ransomware gang claimed the intrusion on September 5 and listed Veradigm on its data leak site, alleging they hold 3.5 million patient records — full names, home addresses, Social Security numbers, email addresses, and phone numbers. The gang has set September 11 as a deadline for Veradigm to begin ransom negotiations, threatening to publish the data if it does not. The Gentlemen has operated since mid-2025, running double-extortion campaigns against more than 800 organizations across 86 countries, and has previously added SystemBC proxy malware and purpose-built EDR-killing tools to its arsenal.
How to check if you’re affected
Affected products include Veradigm’s electronic health record and practice-management platforms used by healthcare providers across the US. If you’ve received care at a clinic or hospital that runs on Veradigm or Allscripts software, your records may have been held in the breached system. Watch your mail for an official notification letter from Veradigm — the company is mailing affected individuals directly. If you receive one, enroll in the free credit monitoring offered. As a precaution, you can place a free credit freeze with the three major bureaus (Equifax, Experian, and TransUnion) to block any new accounts being opened in your name.