SunCloud Health, a behavioral health treatment provider, experienced a data breach between April 22, 2026, and May 4, 2026. The company disclosed the incident to the U.S. Department of Health and Human Services on July 23, 2026, and began mailing notification letters to affected patients on the same date.
The breach affected approximately 2,594 individuals in the United States, compromising patient names and medical information, including diagnoses, medications, and other recommended treatment details. No Social Security numbers or financial data were reported as involved. The full extent of data exposure beyond these categories remains unclear.
Details can continue to emerge as investigations progress, and further notifications or regulatory filings may follow.