From March 19 to March 22, 2026, Virta Medical P.C., along with Virta Health Corp., experienced a data breach. The company discovered this unauthorized activity on March 24, 2026. Regulators were notified starting May 23, 2026, and affected individuals received notification letters on June 17, 2026.
The breach affected 14,636 individuals. It exposed various data types, including names, Social Security Numbers, dates of birth, addresses, and government IDs like Individual Tax Identification Numbers. It also involved medical diagnosis, condition, treatment, medical record numbers, health insurance information, and clinical information. The full extent of the data types compromised has been publicly disclosed.
Details about potential legal actions or the company's financial status remain unclear at this time. Such information may become available as the situation develops.