Cherry Health provides preliminary notice of recent data breach

On April 19, 2026, Cherry Health detected unauthorized access and data exfiltration from its network; the organization later published a preliminary notice indicating copied records may include names, addresses, phone numbers, dates of birth, health insurance and patient identifiers, provider/service details, and limited Social Security numbers. Cherry Health has not disclosed the total number affected or whether encryption, ransom demand, or public posting of stolen data occurred; the report also references a prior December 2023 breach that affected 181,820 patients.