Virta Health Reports Data Breach to California Attorney General
Virta Health Corp. and Virta Medical, PC reported a data security incident to the California Attorney General. The breach, identified on March 19, 2026, involved sensitive patient information including full names, Social Security Numbers, and detailed medical data. Affected individuals should review official notifications for specific guidance on safeguarding their personal and health information.
- State
- California
- Breach date
- March 19, 2026
- Reported
- August 31, 2026
What may have been exposed
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Biometric and Health Log Data
Virta Health Corp. and Virta Medical, PC filed a report with the California Attorney General regarding a data security incident. This filing, dated August 31, 2026, details an event discovered on March 19, 2026, which led to the exposure of sensitive patient data.
The reported data types exposed in this incident include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Biometric and Health Log Data. These categories indicate a compromise of highly personal and health-related details.
Virta Health and Virta Medical operate within the digital healthcare sector, providing services that involve the collection and retention of extensive patient health histories and continuous medical monitoring. This context underscores the sensitive nature of the information maintained by the organizations.
The exposure of such detailed personal and health records can create various risks for affected individuals. This includes potential privacy violations and the unauthorized disclosure of highly confidential health information. Individuals may face attempts to misuse personal credentials or access health-related accounts.
As a healthcare provider in California, Virta Health Corp. and Virta Medical, PC are subject to federal and state regulations concerning the protection of patient data. These frameworks mandate safeguards for electronic protected health information and personally identifiable information, reflecting the critical need to secure this type of data.
Individuals who receive an official notification from Virta Health or Virta Medical regarding this incident should carefully review its contents. It is generally recommended to remain vigilant for suspicious communications or unexpected activity across personal accounts. Regularly monitoring financial statements and obtaining free credit reports can help detect any potential unauthorized use of personal information. Consider changing passwords for online health portals or related accounts where appropriate.