One Medical Senior Health, an Amazon-owned healthcare provider, disclosed a data breach in June 2026. The incident involved unauthorized access to a third-party system used to store archived patient files for One Medical Senior Health and legacy Iora Health. One Medical stated that no other One Medical or Amazon systems were affected.
The compromised files were archived patient records, and the affected population is described as a 'limited number' of individuals. Specific data types involved may include patient names/identifiers, medical records/treatment history, and insurance or billing-related information. The exact number of affected individuals and the full extent of data types exposed have not been publicly detailed. Affected patients were to be notified directly.
Details surrounding the breach, such as the full list of exposed data elements and specific states affected, remain unclear. There are currently investigations for a potential class action lawsuit.