Veradigm Inc.

An unauthorized party pulled patient personal information, including Social Security numbers, out of a Veradigm API using credentials lifted from an unnamed third-party vendor. Veradigm will not say who that vendor is, how many people were affected, or when the access began. Twice in less than two years, an attacker appears to have compromised an organization in Veradigm's extended ecosystem, acquired legitimate credentials there, and then exercised those credentials against a Veradigm-controlled data resource.