Virta Health Corp. Reports Data Breach of Patient Medical Information

Virta Health Corp. and Virta Medical, PC, a Texas-based digital health provider, publicly reported a data breach to regulatory authorities on September 4, 2026. The incident, which allowed unauthorized access to their systems, initially took place on March 19, 2026. The specific nature of how the breach occurred remains unspecified in public filings, though it involved an intrusion into their digital environment.

The compromised information includes a range of highly sensitive personal and health data. Exposed categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. These details are critical for managing patient care and are subject to strict privacy protections.

The exposure of such detailed medical and personal identifiers carries significant risks for affected individuals. Compromised medical information, including diagnoses and treatment histories, can be used for medical identity theft, where fraudsters might attempt to obtain prescriptions or services using a victim's identity. When combined with Social Security Numbers and full names, individuals also face an elevated risk of broader financial fraud, such as unauthorized account access or the opening of new credit lines.

Individuals who receive a notification regarding this incident from Virta Health Corp. or Virta Medical, PC should take proactive steps to protect themselves. It is recommended to carefully review explanations of benefits (EOBs) from insurers and medical bills for any unfamiliar services. Additionally, monitoring credit reports regularly for suspicious activity and considering placing a fraud alert or security freeze on credit files can help mitigate potential financial risks.