In March 2026, Virta Health Corp. and Virta Medical, PC experienced a data breach involving unauthorized activity in a data repository. The company discovered the incident on March 24, 2026, secured the environment, and notified law enforcement. Official notice was distributed via Business Wire/Morningstar on May 22, 2026, with regulatory filings occurring by August 31, 2026.
The breach compromised personal data including names, Social Security numbers, dates of birth, and medical information such as diagnoses, treatment details, physician information, and medical record numbers. Filings indicate 14,636 affected individuals for Virta Medical, PC, and an additional 602 for Virta Health Corp. as a business associate. No financial account data was identified as exposed.
Investigations and official reporting are ongoing. Further details may emerge as regulatory processes continue and affected individuals receive notifications.