Veradigm experienced a data breach due to compromised credentials at a third-party vendor, which allowed attackers to access a Veradigm API reserved for customer services. The attackers copied patient personal data, including Social Security numbers, but did not access clinical or medical records or other parts of Veradigm's environment. The ransomware group 'The Gentlemen' claimed the attack and is threatening to release stolen data unless a ransom is paid. Veradigm responded by activating incident response procedures, notifying law enforcement, and informing affected customers. The breach affected a small number of customers and did not disrupt Veradigm's operations. The investigation is ongoing.

The breach exposed personal data and Social Security numbers of some patients, potentially leading to identity theft or privacy violations. Clinical and medical information remained secure. The incident did not disrupt Veradigm's operational systems or broader network. The ransomware group’s extortion threat poses a risk of public data exposure if ransom negotiations fail. Veradigm does not currently anticipate a material impact on its business or financial condition.

Veradigm has initiated incident response procedures, notified law enforcement, and is conducting an ongoing investigation to determine the full scope. Affected individuals are being notified and offered credit monitoring services where applicable. Since the breach originated from a third-party vendor’s compromised credentials, organizations should review third-party access controls and credential management. No specific patch or fix is applicable as this is a breach incident involving credential compromise. Monitor vendor security practices and ensure robust authentication and access restrictions on APIs.