VirtaHealth, a healthcare company specializing in metabolic health and diabetes treatment, was identified as a ransomware victim by the LAPSUS$ group in a leak post dated March 29, 2026. This report came from ransomware tracking sites and not from VirtaHealth itself or a regulator. No official statement from VirtaHealth has been found in public reports.
As of current reports, the number of individuals affected, the types of data exposed, and the states impacted have not been disclosed. It is also not confirmed whether sensitive data such as Social Security Numbers, medical records, or financial information were involved. No regulator filings or official breach notification letters have been identified.
Details about this incident may emerge over time as investigations progress or if VirtaHealth issues an official statement or notification.