AcademyHealth Data Breach Exposes Social Security Numbers

AcademyHealth, a nonpartisan professional organization dedicated to advancing evidence-based health policy and practice, disclosed a data breach involving sensitive personal and financial information. A total of 126 individuals were impacted by the incident.

The organization filed a disclosure with the Indiana, Massachusetts and Vermont attorneys general offices on July 27, 2026.

On April 6, 2026, the SafePay ransomware group posted a claim on the dark web. In the posting, the group stated it had obtained data belonging to AcademyHealth and announced its intention to publish the stolen information within one day.

The types of personal information exposed in the breach included credit and debit account information, financial account codes, government ID numbers and Social Security numbers.

AcademyHealth's response to the breach

Affected individuals should watch for official correspondence from AcademyHealth regarding the breach. Individuals who receive a notification letter should read it carefully and follow any instructions provided.

Individuals who are uncertain whether a notification they have received is genuine can contact AcademyHealth directly through the organization's official website to confirm its authenticity.

(ndividuals who have any connection to AcademyHealth, whether as members, conference attendees, program participants or other stakeholders, should consider taking steps to protect their personal and financial information.