OpenLoop: OpenLoop faces lawsuit after alleged health data breach

OpenLoop Faces Class-Action Lawsuit Over January Cyberattack Exposing 1.6 Million Patients’ Data

Telehealth infrastructure provider OpenLoop is confronting a potential class-action lawsuit following a January cyberattack that may have compromised the sensitive health information of approximately 1.6 million individuals. The breach highlights growing vulnerabilities in digital health platforms and raises concerns about the security of patient data in an increasingly interconnected healthcare ecosystem.

The incident underscores the broader risks of cybersecurity failures in the telehealth sector, where rapid adoption has outpaced robust safeguards. While details of the attack remain limited, the exposure of protected health information (PHI) could have significant legal, financial, and reputational consequences for OpenLoop and its partners. The fallout may also influence future dealmaking in digital health, as stakeholders prioritize security in vendor evaluations.

The lawsuit, if certified, would represent one of the largest legal challenges tied to a telehealth-related breach, reflecting heightened scrutiny over data protection in the industry. The case serves as a reminder of the high stakes for companies handling sensitive medical records amid rising cyber threats.

Source: https://www.axios.com/pro/health-tech-deals/2026/03/09/openloop-lawsuits-alleged-health-record-breach

OpenLoop cybersecurity rating report: https://www.rankiteo.com/company/openloophealth

"id": "OPE1773066666",
"linkid": "openloophealth",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1.6 million individuals',
                        'industry': 'Telehealth/Healthcare',
                        'name': 'OpenLoop',
                        'type': 'Company'}],
 'data_breach': {'number_of_records_exposed': '1.6 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Protected health information '
                                             '(PHI)'},
 'date_detected': '2024-01',
 'description': 'Telehealth infrastructure provider OpenLoop is confronting a '
                'potential class-action lawsuit following a January '
                'cyberattack that may have compromised the sensitive health '
                'information of approximately 1.6 million individuals. The '
                'breach highlights growing vulnerabilities in digital health '
                'platforms and raises concerns about the security of patient '
                'data in an increasingly interconnected healthcare ecosystem.',
 'impact': {'brand_reputation_impact': 'Significant reputational consequences',
            'data_compromised': 'Sensitive health information of approximately '
                                '1.6 million individuals',
            'identity_theft_risk': 'Exposure of protected health information '
                                   '(PHI)',
            'legal_liabilities': 'Potential class-action lawsuit'},
 'lessons_learned': 'The incident underscores the broader risks of '
                    'cybersecurity failures in the telehealth sector, where '
                    'rapid adoption has outpaced robust safeguards.',
 'references': [{'source': 'Cyber Incident Description'}],
 'regulatory_compliance': {'legal_actions': 'Potential class-action lawsuit'},
 'title': 'OpenLoop Faces Class-Action Lawsuit Over January Cyberattack '
          'Exposing 1.6 Million Patients’ Data',
 'type': 'Data Breach'}