Veradigm (formerly Allscripts) reported a hacking incident stemming from a compromised customer credential, discovered on July 1, 2025, though the breach originated around December 15, 2024. An unauthorized actor accessed a Veradigm storage unit using credentials obtained from a compromised customer during an earlier, unrelated security incident. The exposed data varies per individual but includes names, dates of birth, contact details, health records (diagnoses/treatments), Social Security numbers, health insurance information, payment details, and driver’s license numbers.The breach impacted nearly 70,000 patients in just two states (South Carolina and Texas), with broader implications likely. Veradigm engaged cybersecurity experts to investigate, implemented new safeguards, and notified affected patients and regulators. The incident did not disrupt Veradigm’s primary network or daily operations but highlights critical third-party vendor risks in healthcare data security. The breach underscores vulnerabilities in credential management and the cascading effects of supply-chain attacks on protected health information (PHI).