The breach occurred on the systems of a vendor that provides services to Veradigm, and the compromised information may include names, contact details, and other sensitive patient data. Veradigm stated that the vendor is cooperating with the investigation and that law enforcement has been notified.

Key details from the advisory include:

• The incident was limited to the third-party vendor's environment, not Veradigm's core systems.
• Affected individuals are being notified directly if their data was involved.
• Veradigm is offering credit monitoring or identity protection services where applicable.
• The company has urged patients to remain vigilant against phishing or suspicious communications.

While the ransomware group has publicly claimed responsibility, Veradigm has not confirmed the identity of the attackers or released any specific indicators of compromise at this time. The company has not yet provided a timeline for when the breach was discovered or fully contained.

Source: Unknown

Are any of you involved with healthcare vendors that rely on third-party service providers—how are you validating that your data is protected when those vendors suffer incidents like this one?