Virta Health Corp. and Virta Medical, P.C. Data Breach – Investigated by Federman & Sherwood
June 15, 2026 – Federman & Sherwood, a national consumer protection law firm, is investigating the Virta Health data breach, a cybersecurity incident involving unauthorized access to sensitive personal and protected health information that was reported to the California Attorney General.
According to the notice, Virta Health identified unauthorized activity involving a data repository separate from its production platform on March 24, 2026. Upon discovery, the company secured the affected environment, initiated an investigation, retained external cybersecurity experts, and notified law enforcement.
The investigation determined that certain files stored within the affected repository may have been accessed between March 19, 2026, and March 22, 2026. Following a review of the impacted data, Virta Health concluded that sensitive personal and medical information may have been exposed to an unauthorized third party.
The information potentially exposed includes names, Social Security numbers, dates of birth, dates of medical service, medical diagnosis information, physician or medical facility information, medical condition and treatment information, medical record numbers, and other unique health identifiers.
Data breaches involving healthcare and medical information are particularly concerning because they may expose highly sensitive personal information that can be used for identity theft, medical identity theft, insurance fraud, and other forms of misuse.
Federman & Sherwood is actively investigating whether Virta Health Corp. and Virta Medical, P.C. implemented reasonable cybersecurity safeguards to protect patient information and whether this data security incident could have been prevented. The firm is also evaluating potential legal claims on behalf of individuals affected by the Virta Health data breach.
Virta Health reported that it enhanced security measures, engaged cybersecurity experts, notified law enforcement, and is offering affected individuals twelve (12) months of complimentary credit monitoring and fraud assistance services.
Consumers who received a notice regarding the Virta Health data breach or who believe their personal information may have been compromised are encouraged to monitor healthcare records, insurance statements, financial accounts, and credit reports for suspicious activity.
The potentially compromised information may include:
- Names
- Social Security numbers
- Dates of birth
- Medical information
- Financial information
- Other sensitive information
What are Virta Health Corp. and Virta Medical, P.C.?
Virta Health Corp. and Virta Medical, P.C. operate as a combined virtual clinic and medical practice.
Individuals affected by the Virta Health data breach may have legal rights and are encouraged to contact Federman & Sherwood to learn more about their options.
Phone: 1-800-237-1277 | Email: info@federmanlaw.com