On November 12, 2026, ClassAction.org reported that attorneys were investigating reports of a possible Scripps Health data breach. The report cited a November 10 post on Ransomware.live, which attributed a suspected attack to the Vortex group and estimated that it occurred on September 17, 2026. The incident has not been publicly confirmed by Scripps Health or a regulator in the sources reviewed.
The claims described possible exposure of patient clinical records and protected health information, physician credentialing files, workforce timekeeping and leave records, and emergency notification and contact records. The affected count, whether Social Security numbers or financial data were involved, and the company’s discovery and notification dates remain unknown. As of the November 12 report, the scope and nature of the suspected incident had not been established; later disclosures may provide additional details.