OpenLoop Health openloophealth.com OpenLoop Health data breach: what happened and what to do
Unauthorized access to OpenLoop Health's systems on January 7 and 8, 2026 affected up to 716,000 people. Exposed data reportedly included names, addresses, email addresses, dates of birth and medical information. The company says Social Security numbers weren't accessed.
View all 13,115 breaches- Breach date
- 7 Jan 2026
- Affected
- 716,000
- Data exposed
- Names, Physical addresses, Email addresses, Dates of birth, Medical information
- Last updated
What happened
OpenLoop Health runs telehealth infrastructure for other healthcare companies, so most affected people are patients of its clients. It discovered unauthorized access on January 7, 2026, with access running from January 7 to 8. The breach was reported to HHS on March 17, 2026, and the HHS portal lists 716,000 people, per SecurityWeek and HIPAA Journal.
Reports say the data included names, addresses, email addresses, dates of birth and medical information. OpenLoop says the incident didn't involve electronic health record, Social Security number or financial account information.
Without Social Security numbers, the main risk is targeted phishing. A message that knows your name, birth date and that you used a telehealth service is easy to believe. The company is notifying people by mail and offering complimentary credit monitoring and identity theft protection.
A hacker has claimed to hold data on 1.6 million patients. That claim is unverified, and the official figure is the HHS number.
The Texas Attorney General separately lists 68,160 Texas residents, a state-level count that sits inside the larger HHS figure. OpenLoop's clients are the companies that run the patient relationship, so the letter may name a brand you recognize rather than OpenLoop.
What to do if you were in it
- 1
Expect phishing that mentions the breach
Criminals use real details to sound credible. Don't click links in unexpected emails, texts or calls. Contact the company using the number on its official website.
- 2
Treat health-related messages with care
Don't share medical or insurance details with anyone who contacts you first. Call your provider on a number you looked up yourself.
- 3
Use the free credit monitoring if you were offered it
OpenLoop is offering complimentary credit monitoring and identity theft protection. Sign up with the code in your letter before it expires, and read your statements for charges you don't recognize.
- 4
Change reused passwords
If you use the same password for your telehealth account and elsewhere, change it and turn on two-factor authentication.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus keeps monitoring breach databases and the dark web and alerts you when something new turns up.
Frequently asked
Was I affected by the OpenLoop Health data breach?
OpenLoop is notifying people by mail. If you used a telehealth service powered by OpenLoop, watch for a letter.
What was exposed?
Reportedly names, addresses, email addresses, dates of birth and medical information. OpenLoop says Social Security numbers weren't involved.
How many people were affected?
The HHS portal lists up to 716,000 people.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
