Health Gorilla Data Breach Exposes Sensitive Patient Information Health Gorilla, a Silicon Valley-based healthcare interoperability platform founded in 2014, is under investigation following a data breach that may have exposed sensitive patient information. The incident, disclosed on January 13, 2026, involved an unauthorized disclosure of health data through its health information exchange (HIE) network. The breach potentially compromised a wide range of personally identifiable information (PII) and medical records, including: - Names, dates of birth, and addresses - Driver’s license and insurance card details - Financial information - Clinical data (diagnoses, conditions, lab results, medications, and care plans) Health Gorilla reported that the data may have been accessed for treatment purposes, but investigators have not confirmed whether the requests or authorizations were legitimate. In response, the affected health organizations Mosaic, OCHIN, Reid Health, Trinity Health, and UMass Memorial Health were temporarily suspended from the HIE while the investigation continues. Class action law firm Shamis & Gentile P.A. is examining potential legal claims for affected individuals, who may be eligible for compensation. The full scope and impact of the breach remain under review.