DataBreachCaseFile.com

Case file

Case File: MedImpact Healthcare Systems, Inc. Data Breach

This file collects the dated facts on record for the MedImpact Healthcare Systems, Inc. incident. The state report is dated September 26, 2026. The incident itself is dated October 18, 2025.

Timeline

343 days separate the incident date from the date it was reported.

  1. October 18, 2025Incident dateWhen the filing says the breach took place.
  2. September 26, 2026Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state
Oregon
Date reported
September 26, 2026
Incident date
October 18, 2025
Receiving office
Oregon Attorney General

Data categories in the file

  • Full Name
  • Date of Birth
  • Social Security Number
  • Health Insurance ID Number
  • Prescription Information
  • Diagnosis and Treatment Information
  • Provider and Treatment Dates
  • Financial Account Number

Case notes

MedImpact Healthcare Systems, Inc., a company providing pharmacy benefit management services, filed a data breach report with the Oregon Attorney General on September 26, 2026. This report details an unspecified security incident that occurred on October 18, 2025, affecting sensitive personal data. As an entity critical to the healthcare ecosystem, MedImpact manages substantial volumes of deeply sensitive health and personal information.

According to the official filing, the exposed information included Full Name, Date of Birth, Social Security Number, Health Insurance ID Number, Prescription Information, Diagnosis and Treatment Information, Provider and Treatment Dates, and Financial Account Number. These specific categories are frequently processed and retained by organizations in the pharmacy benefit management sector.

The exposure of such comprehensive personal and health information can present significant, long-term challenges for affected individuals. Unlike easily changeable credentials, certain personal identifiers and health records, once compromised, cannot be altered, increasing the potential for persistent misuse of personal data.

Individuals who receive notification regarding this incident are advised to remain vigilant. It is recommended to carefully review all Explanation of Benefits (EOB) statements, financial account statements, and credit reports for any unfamiliar or suspicious activity. Placing a fraud alert or instituting a credit freeze are general protective measures that can also be considered.

Questions about this case file

Where does the MedImpact Healthcare Systems, Inc. case file come from?
Every entry is taken from the breach report MedImpact Healthcare Systems, Inc. lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?
Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?
It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?
Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

More Oregon case files

Oregon data breaches

Filing source: Oregon Attorney General