Veradigm, a healthcare technology company that processes clinical and administrative data on behalf of physician practices and health systems, discovered unauthorized access to its systems on July 1, 2025. The breach affected more than 84,000 individuals, including patients whose records were held within Veradigm's platform. The attack vector has not been publicly disclosed. Veradigm was formerly known as Allscripts Healthcare Solutions and rebranded in 2023; many affected patients would not have recognized the company's name or known their data was held there. The exposed data included names, Social Security numbers, driver's license numbers, dates of birth, home addresses, phone numbers, email addresses, medical diagnoses, medications, test results, health insurance details, account balances, and payment information. This combination is particularly dangerous. Social Security numbers enable identity theft and fraudulent credit applications. Medical diagnoses and insurance details can be used to submit false insurance claims or obtain prescription drugs under a victim's identity. Account balance data adds a direct financial dimension to the exposure. Veradigm notified affected individuals on September 22, 2025, and reported implementing additional technical safeguards. A consolidated class-action lawsuit, Goodrum et al. v. Veradigm, Inc., reached a $10.5 million settlement. Eligible individuals could claim up to $5,000 for documented out-of-pocket losses, a $50 flat cash payment, or two years of medical data monitoring. The claim deadline was March 16, 2026. Affected individuals should monitor their credit reports, review their health insurance statements for unfamiliar claims, and consider placing a fraud alert or credit freeze with the major credit bureaus.

Health IT platforms collect provider, patient, prescribing, claims, billing, and workflow data across electronic records, analytics, and healthcare software systems.

Veradigm completed its rebranding from Allscripts in 2023 and has continued repositioning itself as a health data and analytics business. The company has faced financial pressure and strategic restructuring. The 2025 breach and associated $10.5 million settlement were the most significant legal and reputational events of the recent period.