AdaptHealth Corp.

A social-engineering attack compromised a third-party contractor’s user session and gave the attacker access to AdaptHealth cloud applications, patient systems and external EHR portals. Data was exfiltrated, including patient PII/PHI and insurance-billing password data. This is a clean cyber incident: compromised identity, unauthorized access and confirmed data theft.