AdaptHealth Breach Exposes 4.1 Million: The Vendor Problem

One contractor's login. 4.1 million patients exposed.

AdaptHealth, a large home-medical-equipment provider, has confirmed that attackers reached the data of about 4.1 million people. Credit where it's due: the company says Social Security numbers and financial data were not involved. The exposed information includes:

• Full names and contact details
• Demographic information
• Health insurance information
• Health information

The way in matters

This wasn't an exotic zero-day. Attackers social-engineered a session at a third-party contractor — they tricked a human with access. That's the pattern behind a growing share of major breaches: the weakest door isn't always the company you trusted, it's a vendor you've never heard of, holding data you never handed them directly.

You can't audit every contractor in every company's supply chain. So the realistic defense isn't preventing the next vendor breach — it's making sure that when one happens, there's less of you available to weaponize.

What you can do

• Limit what's casually purchasable about you. The more of your address history, phone numbers, and relatives that sit on people-search sites, the more a single leak can be combined into a full profile.
• Watch for targeted phishing. Breaches like this feed convincing, personalized scams — treat unexpected "account" messages with suspicion.
• Remove and monitor. Get your data off the broker network and keep it off.

GhostMyData scans the data-broker network, removes your information, and keeps it removed — automatically. Run a free scan to see what a stranger could assemble about you.

Sources: Security Magazine, HIPAA Journal, Cloaked.