Modern Health Data Breach Exposes Protected Health Information in Provider Network Incident San Francisco-based mental health platform Modern Health disclosed a data breach in January 2026, stemming from unauthorized access by an individual within its provider network. The incident, first detected in November 2025, involved the compromise of member profiles on the company’s behavioral health platform. While the total number of affected individuals remains undisclosed, the exposed data included protected health information (PHI) from member profiles. However, Social Security numbers and financial details were not impacted. According to a filing with the Massachusetts Office of Consumer Affairs and Business Regulation on January 16, 2026, at least two Massachusetts residents were confirmed to be affected. Modern Health responded by disabling the compromised profiles and enlisting legal counsel to investigate. By January 5, 2026, the company had finalized the list of potentially affected individuals. Affected users were notified via email on January 12, 2026, with details about the breach. In the aftermath, Modern Health enhanced its provider-vetting and onboarding processes and implemented additional staff training to mitigate future risks. The company has also made its support and privacy teams available for inquiries.

Modern Health Data Breach Exposes Sensitive Health Information of Limited Users In November 2025, Modern Health, a San Francisco-based mental health care provider, detected unauthorized access to a small number of member profiles on its behavioral health platform. The breach involved an individual within its provider network who accessed sensitive data without authorization. The company promptly disabled the affected profiles and initiated an internal investigation, finalizing the list of impacted individuals by January 5, 2026. The incident was officially disclosed to the Massachusetts Attorney General’s office on January 16, 2026, with only two affected individuals reported in the state. While Social Security numbers and financial data were not compromised, exposed information may have included protected health records, varying by individual. Modern Health serves over 200 global companies through its digital platform, which offers therapy, coaching, and wellness tools to employees. Founded in 2017, the company employs more than 750 people. Affected individuals were advised to monitor accounts and credit reports, though no further details on the scope of the breach or the number of impacted users beyond Massachusetts have been publicly confirmed. Shamis & Gentile P.A., a class action law firm, is investigating potential compensation for those affected.