HealthStream, Inc. Data Breach Exposes Sensitive Personal Records

HealthStream, Inc. formally announced a cybersecurity incident to the Vermont Attorney General on September 14, 2026. This breach involved the compromise of highly sensitive personal and professional information, the full extent of which is currently under review.

The reported exposed data categories include Full Name, Social Security Number, Date of Birth, Professional License and Credentialing Information, Employment and Personnel Records, Contact Information, Financial Account Details, and User Authentication Credentials. This combination of data types places affected individuals at a substantial risk of identity theft, financial fraud, and other serious harms.

The exposure of Social Security Numbers and Financial Account Details can directly lead to unauthorized transactions and fraudulent credit applications. Furthermore, the compromise of Professional License and Credentialing Information, along with Employment and Personnel Records, could be exploited for employment fraud or misuse of professional identities. Recipients of a notification letter should monitor their financial accounts, credit reports, and professional credentials closely for any suspicious activity.

As a company entrusted with a vast array of sensitive data from healthcare professionals and institutions, HealthStream, Inc. was obligated to maintain robust cybersecurity safeguards. The occurrence of a breach of this magnitude suggests potential failures in these security protocols, which could form the basis for claims of negligence.

If you have received an official data breach notification letter from HealthStream, Inc., it signifies that your personal information was compromised due to this incident. This notification is a critical step in establishing your standing should you wish to pursue legal action. Our firm is actively investigating this breach and offers free, confidential case reviews to help you understand your rights and determine if you are eligible to join a class action lawsuit.