1Life Healthcare, Inc. (One Medical, Iora Health)

One Medical disclosed unauthorized access to a third-party file-storage system containing archived patient information from its legacy Seniors business. Archived data is still data and data is valuable to the adversary. Data outlives applications, vendors and acquisitions; security architectures need to assume that every retained copy remains part of the attack surface.