Monitor for updates on the scope of affected data, any regulatory actions (e.g., HIPAA, state AG investigations), and potential class-action lawsuits. Look for amendments to this 8-K as more information becomes available. The perceived risk from patient PHI exposure may weigh on the stock in the near term despite containment.
Price Chart
Executive Summary
AdaptHealth disclosed a material cybersecurity incident involving unauthorized access to cloud-based business applications, including patient management systems, via a social engineering attack on a third-party contractor. The incident, confirmed on June 15, 2026, and deemed material on June 27, 2026, involved exfiltration of a stored password file for insurance billing and access to external electronic health record portals, exposing personally identifiable and protected health information. While the incident has been contained and has not materially impacted operations or patient service, the financial impact remains uncertain, creating legal, regulatory, and reputational risk.
Key Facts
- A threat actor gained unauthorized access to AdaptHealth's cloud-based business applications via a social engineering attack on a third-party contractor.
- Data exfiltrated includes a stored password file for insurance billing and accessed external electronic health record portals, exposing personally identifiable information (PII) and protected health information (PHI).
- AdaptHealth determined the incident is material on June 27, 2026, due to the nature and potential volume of data at risk.
- The incident has been contained; no material impact on operations or patient service as of the report date.
- The company does not collect Social Security numbers in affected systems and does not store financial account or payment card information there.
- Full financial impact, including remediation, legal, regulatory, and reputational costs, cannot be determined at this time.
- The company maintains cybersecurity insurance that may cover certain losses.
Financial Impact
Financial impact is currently unknown but could be material; the company cannot estimate remediation, legal, regulatory, notification, or reputational costs. Cybersecurity insurance may provide partial coverage.
Risk Factors
- Regulatory penalties and enforcement actions from HHS/OCR or state AGs under HIPAA and state data breach laws.
- Patient notification costs, credit monitoring services, and potential litigation from affected parties.
- Reputational damage leading to patient attrition or contract losses with healthcare partners and insurers.
- Undisclosed residual access or broader data sets not yet identified during the ongoing investigation.
Market Snapshot
Investment Themes
Documents Analyzed
This report is based on 4 SEC documents filed with EDGAR.
| Document | Accession Number |
|---|---|
| 8-K Filing (Primary) | 0001104659-26-080297 |
| Document: 0001104659-26-080297-index-headers.html | 0001104659-26-080297 |
| Document: 0001104659-26-080297-index.html | 0001104659-26-080297 |
| Document: 0001104659-26-080297.txt | 0001104659-26-080297 |
Filters
| Type | Now | ||||
|---|---|---|---|---|---|
Aug 15, 2026 6w ago | Institutional Cluster | $5.81 $5.82 | ▼ −0.17% | ▼ −2.15% | $5.60 (+3.61%) |
Aug 14, 2026 7w ago | Insider Cluster | $5.81 $5.88 | ▲ +1.20% | ▲ +3.20% | $5.60 (−3.61%) |
Aug 11, 2026 7w ago | Insider Cluster | $5.65 $5.70 | ▲ +0.89% | ▲ +1.94% | $5.60 (−0.88%) |
Jul 2, 2026 13w ago | 8-K | $10.76 $10.68 | ▲ +0.74% | ▲ +0.33% | $5.60 (+47.96%) |
Jun 26, 2026 14w ago | 3 | $10.21 $10.76 | ▲ +5.39% | ▲ +5.67% | $5.60 (−45.15%) |
May 5, 2026 21w ago | 8-K | $11.75 $9.65 | ▼ −17.87% | ▼ −22.83% | $5.60 (−52.34%) |
Apr 13, 2026 24w ago | 8-K | $12.32 $11.24 | ▼ −8.77% | ▼ −16.49% | $5.60 (−54.55%) |
Mar 12, 2026 29w ago | Insider Cluster | $13.08 $10.35 | ▼ −20.87% | ▼ −26.92% | $5.60 (−57.19%) |
Feb 26, 2026 31w ago | Insider Cluster | $9.08 $11.41 | ▲ +25.66% | ▲ +32.06% | $5.60 (−38.33%) |
US Market Status
Subscribe to SecBot
Get Real-Time SEC Filing Intelligence
Comprehensive SEC filing analysis delivered the moment filings hit EDGAR. Sentiment scoring, impact analysis, and actionable insights for every material event.
Try SecBot Free Coming soon: SecBot Pro with alerts, watchlists, and API access