AdaptHealth says attackers sweet-talked their way into cloud systems and stole patient data

AdaptHealth disclosed a security incident in which attackers used social engineering to compromise a third-party contractor, gaining access to its cloud systems and exfiltrating patient protected health information and a password file used for insurance billing. The company says it contained the incident by disabling the contractor account, resetting credentials, adding access controls, and reported the matter to the SEC while investigations continue.