Blossom BH Opco Inc.

A phishing attack on a non-employee contractor handed an intruder Blossom BH Opco's electronic health records system around August 27, 2026, exposing patient names, contact details, and insurance information. The source gives no patient count, and an actor calling itself 2019 claims far more, from birthdates and addresses to appointment records. For a telepsychiatry provider, the security boundary turned out to be an outsider's inbox with standing access to the clinical record.