In 2026, Virta Medical P.C. and Virta Health Corp. identified unauthorized activity on its data repository. The company secured the environment, launched an investigation with external cybersecurity experts, and notified law enforcement. Virta Health reported no indication of misuse at the time of its official notice.
The breach may have involved various personal and health-related data, including names, Social Security numbers, dates of birth, dates of medical service, medical diagnosis and treatment information, and health insurance information. While the exact number of affected individuals was not publicly disclosed in the official notice, one secondary source estimates approximately 14,636 individuals were affected. The breach was reported to the California Attorney General and HHS.
Details about data breaches can emerge over time, and notification processes may experience delays. Individuals who believe they may be affected should monitor official communications from Virta Medical P.C.