OpenLoop Health Inc., which provides digital health infrastructure and telehealth support, recently disclosed a data security incident to the Washington Attorney General. The filing date for this breach report was March 27, 2026, indicating a compromise of its systems that handle critical patient and provider information.
The breach involved several categories of sensitive personal and health data. This included individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates.
The exposure of such deeply personal information carries significant risks. Affected individuals could face long-term threats like medical identity theft, where their health records might be misused for fraudulent treatments or prescriptions. Additionally, the compromise of Social Security Numbers elevates the risk of broader identity theft and financial fraud.
Companies like OpenLoop Health Inc. are legally required by statutes such as HIPAA to safeguard protected health information with rigorous security measures. The occurrence of a data breach of this scope often suggests that these necessary precautions may not have been sufficient to prevent unauthorized access to sensitive data.
If you received an official data breach notification letter from OpenLoop Health Inc., it confirms your information was compromised. This notice is a key step in determining your legal options. You are not required to suffer direct financial losses before exploring potential legal action. Our firm is currently investigating class action claims against OpenLoop Health Inc. for this incident, and we offer a free case review to help you understand your rights.