Virta Health Corp. and Virta Medical, PC

Virta Health's compromised repository sat apart from its production platform, but unauthorized access still ran from March 19 to 22, 2026, exposing Social Security numbers, diagnoses, physician information, and medical record numbers for 14,636 people. The filing does not say how Lapsus$, the group that claimed the breach, got in. Separation from production is not isolation; the side repository still holds the whole clinical record. Lapsus$ posted Virta to its leak site on March 23, a full day before anyone at Virta noticed, which says more about who was watching than about who broke in.