3.7 Million Telehealth Patients Allegedly Affected By Two Recent Breaches

DataBreaches reports that a threat actor known as "Stuckin2019" allegedly exfiltrated and posted patient data from telehealth providers OpenLoop Health and Zealthy—claiming roughly 1.6 million and 2.1 million records, respectively—containing names, contact details, medical and biometric information, and driver’s license images; OpenLoop notified state attorneys general and offered identity monitoring while Zealthy has not publicly confirmed the incident, and some evidence (data samples) was posted then removed from forums.