Photon Health, a Brooklyn-based prescription network company, confirmed that a hacker exploited a software flaw in August 2026 to access patient names, addresses, phone numbers, birth dates, and prescription information. Notification letters went out in October 2026. Affected individuals should enroll in the free credit monitoring Photon Health is offering and watch closely for phishing attempts referencing their prescriptions.
| Company | Photon Health |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Full Names, Home Addresses, Phone Numbers, Dates of Birth, Prescription Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Zero-Day Vulnerability Exploit |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Photon Health Data Breach?
Photon Health, a Brooklyn, New York-based company that runs a prescription network for healthcare providers, has disclosed a data security incident. The company learned in August 2026 that an intruder had exploited a previously unknown flaw in a third-party tool it used internally. This tool, called Metabase, supported business intelligence, product metrics, and customer dashboards.
Because the flaw was a zero-day vulnerability, Photon Health had no prior warning that it could be used to break into its systems. As a result, the attacker was able to reach data stored within the platform. This data was potentially taken from the network before Photon Health became aware of the intrusion.
After discovering the incident, Photon Health began a forensic review to determine exactly what information had been affected. This review wrapped up in early September 2026. The company confirmed that the exposed data included patient names, addresses, phone numbers, birth dates, and prescription information. A ransomware and extortion group claimed responsibility for the attack, though Photon Health’s notification focused on the confirmed facts of the intrusion rather than the attacker’s identity.
Who was affected?
The Photon Health data breach affects individuals whose prescription or patient information passed through the company’s network. Because Photon Health operates a prescription network used by numerous healthcare providers, the affected population likely spans patients connected to multiple pharmacies or prescribers rather than a single clinic.
At this time, Photon Health has not publicly disclosed the total number of individuals affected or how many client organizations were involved. In addition, the company has not released a specific geographic breakdown of impacted patients. Given that prescription data was involved, it is reasonable to assume the affected group includes people with ongoing medical treatments, though this has not been confirmed in detail.
What Information Was Potentially Exposed?
According to Photon Health’s own confirmation, the breach involved several categories of sensitive personal and medical information. This data was stored within the Metabase application that the attacker exploited.
- Full names
- Home addresses
- Phone numbers
- Dates of birth
- Prescription information
This combination of data creates real risk for affected patients. For example, names paired with addresses and birth dates give scammers enough detail to attempt convincing phishing messages or impersonation scams. Because prescription information was also involved, there is a chance this data could be misused to target individuals based on specific health conditions implied by their medications.
In addition, this type of information can fuel targeted fraud schemes, such as fake pharmacy or insurance calls designed to extract more sensitive details like payment or insurance numbers. While Social Security numbers were not listed among the exposed data in this incident, contact and health-related details alone can still support identity theft, medical fraud, or persistent spam and scam attempts. Affected individuals should treat any unexpected calls or texts referencing their prescriptions with caution.
What is the company doing?
Photon Health has stated that it began mailing notification letters to affected individuals in October 2026. At the time those letters went out, the company said it was unaware of any actual misuse of the exposed data. This suggests Photon Health is actively monitoring for signs of fraud tied to the incident.
Beyond notification, Photon Health has confirmed that it is offering complimentary credit monitoring and identity theft protection services to those affected. The company also says it is reviewing its cybersecurity practices and taking additional steps to prevent similar incidents going forward. This ongoing review suggests Photon Health is treating the exploited vulnerability as a priority area for improvement rather than a one-time fix.
What Should Affected Individuals Do?
Enroll in the Free Credit Monitoring Offered
If you received a notification letter from Photon Health, take advantage of the complimentary credit monitoring and identity theft protection services being offered. These services can alert you quickly if someone tries to open new accounts or lines of credit using your information.
Because enrollment windows for these free services are often time-limited, it helps to sign up as soon as possible after receiving your letter. Delaying enrollment could mean missing valuable protection during the period when risk is often highest.
Watch for Phishing Attempts
Scammers often use breach data to craft believable phishing emails, texts, or phone calls. Since this incident involved prescription details, watch for messages pretending to be from a pharmacy, doctor’s office, or insurance provider asking you to confirm personal information.
Never click links or share details in unsolicited messages, even if they reference real prescriptions or medical details. Instead, contact your healthcare provider directly using a number you already know to be legitimate.
Monitor Your Credit Reports Regularly
In addition to any monitoring service Photon Health provides, it’s wise to check your credit reports yourself on a regular basis. You can request free reports from each of the three major credit bureaus annually through AnnualCreditReport.com.
Look closely for unfamiliar accounts, inquiries, or addresses that don’t belong to you. If you spot anything suspicious, report it to the credit bureau immediately and consider placing a fraud alert on your file.
Be Cautious With Medical and Insurance Communications
Because prescription information was exposed, affected individuals should stay alert to unusual activity involving their healthcare accounts. This includes reviewing insurance statements, known as Explanation of Benefits documents, for any services or medications you don’t recognize.
If you notice discrepancies, contact your insurer and healthcare provider right away. Early reporting can help prevent further misuse and may limit your financial responsibility for fraudulent claims.
Consider Speaking With a Data Breach Attorney
If you received a notice from Photon Health, you may want to speak with an attorney who focuses on data breach cases. An attorney can help you understand whether you qualify for compensation and what documentation to gather.
Many attorneys offer free initial consultations for these cases. This means you can explore your options and learn about potential legal remedies without any upfront cost.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.