Healthcare technology provider Veradigm (formerly Allscripts) disclosed in an SEC filing that an attacker obtained credentials from a third-party vendor's environment for a Veradigm customer-services API and used them to copy patient data, including personal details and Social Security numbers for some patients; clinical or medical information was not accessed and access was limited to that interface. Separately, The Gentlemen ransomware group claimed the intrusion, listing Veradigm on its leak site on 5 September and alleging it holds 3.5 million patient records, threatening to leak them if no ransom is negotiated by 11 September. Veradigm said the incident did not materially affect operations and is notifying affected customers with credit monitoring, while law enforcement was notified.

Source

• BleepingComputer — Veradigm warns of patient data breach after ransomware gang claims attack (2026-09-09)
• The Record — Electronic health record company says customer data stolen in breach (2026-09-09)