Amazon One Medical Reports Data Breach Affecting Senior Care Patients Amazon’s One Medical disclosed a security incident on June 13, 2024, after an unauthorized party accessed a third-party file storage system containing archived data from Iora Health, a Medicare-focused primary care provider acquired by One Medical in 2021. The breach impacted a "limited number" of patients from One Medical’s senior care clinics, which now operate under the rebranded One Medical Senior Health. The company confirmed that the compromised system stored legacy patient files from Iora Health and affected individuals, though the exact number of impacted patients remains undisclosed. One Medical stated that no other One Medical or Amazon systems were involved, and the incident was contained to the third-party storage platform. Immediate actions were taken to deactivate the system and revoke access, followed by an internal investigation. One Medical is directly notifying affected patients and has pledged to implement additional safeguards to prevent future breaches. The acquisition of Iora Health in 2021, which served approximately 39,000 Medicare patients across 46 clinics at the time, was part of Amazon’s broader $3.9 billion purchase of One Medical, finalized in February 2023. The breach highlights ongoing risks in healthcare data security, particularly for legacy systems integrated into larger platforms.