US health IT firm Veradigm: vendor's API credentials stolen, patient data including some SSNs downloaded

Veradigm told the SEC that one of its third-party vendors suffered a cybersecurity incident in which an unauthorized party obtained credentials to a Veradigm API from the vendor's environment, affecting data of a small number of customers ^[1]. The party used the credentials to download certain patient personal data, in some instances Social Security numbers, but no clinical or medical data; law enforcement was notified and the investigation continues ^[1]. Veradigm says affected customers and individuals are being notified, with credit monitoring offered where applicable, which recipients can enroll in per their notice ^[1].

Industries mainly affected: Healthcare

1. If notified by Veradigm, enroll in the credit monitoring offered in the notice ^[1].