Virginia Health Services Investigates Potential Data Breach Impacting 227,000 Individuals
Virginia Health Services (VHS), a provider of senior living, home health care, and elder care services across southeastern Virginia, is investigating a potential data breach after a threat actor claimed responsibility for exposing sensitive information. The incident, first reported on April 23, 2026, was flagged by dark web monitoring sites, including Ransomware.Live, which attributed the attack to the group WorldLeaks.
The compromised data, totaling 227,194 records, reportedly includes Social Security numbers, birthdates, email addresses, phone numbers, names, and street addresses primarily belonging to current and former patients. While VHS has not officially confirmed the breach, legal teams and cybersecurity researchers are actively assessing the scope of the exposure.
Class action attorneys are now gathering affected individuals to determine whether a lawsuit can be filed, citing potential damages such as loss of privacy, financial costs, and time spent mitigating the breach’s impact. The investigation remains ongoing, with no official statement from VHS regarding the incident’s cause or remediation efforts. Further updates are expected as details emerge.
Source: https://www.classaction.org/data-breach-lawsuits/virginia-health-services-april-2026
VHC Health cybersecurity rating report: https://www.rankiteo.com/company/vhchealth
"id": "VHC1777501563",
"linkid": "vhchealth",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '227,194',
'industry': 'Healthcare',
'location': 'Southeastern Virginia, USA',
'name': 'Virginia Health Services (VHS)',
'type': 'Healthcare Provider'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '227,194',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'birthdates',
'email addresses',
'phone numbers',
'names',
'street addresses']},
'date_detected': '2026-04-23',
'date_publicly_disclosed': '2026-04-23',
'description': 'Virginia Health Services (VHS) is investigating a potential '
'data breach after a threat actor claimed responsibility for '
'exposing sensitive information. The compromised data includes '
'Social Security numbers, birthdates, email addresses, phone '
'numbers, names, and street addresses of current and former '
'patients.',
'impact': {'data_compromised': '227,194 records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Ransomware.Live'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
'threat_actor': 'WorldLeaks',
'title': 'Virginia Health Services Potential Data Breach',
'type': 'Data Breach'}