Apex Data Breach Exposes Sensitive Personal and Health Information Apex recently disclosed a data breach in which unauthorized actors accessed and potentially exfiltrated sensitive personal and health-related information. The incident came to light on December 23, 2025, when the company detected a cyberattack involving a file-locking virus on its network. An investigation revealed that the unauthorized access occurred on December 9, 2025, with attackers potentially acquiring a range of confidential data. The exposed information includes: - Personal identifiers: Names, Social Security numbers, addresses, phone numbers, dates of birth, driver’s license numbers, passport numbers, and other government-issued IDs. - Health data: Treatment details, diagnoses, prescription information, health insurance identifiers, and patient account numbers. - Financial information: Bank account numbers (without security codes or passwords). Apex has since published a breach notice on its website, detailing the affected data types and offering complimentary credit monitoring services to impacted individuals. The full scope of the breach, including the number of affected parties, remains under review.