AcademyHealth Data Breach Exposes Social Security Numbers

AcademyHealth, a nonpartisan professional organization dedicated to advancing evidence-based health policy and practice, disclosed a data breach involving sensitive personal and financial information. The total number of individuals affected by the breach across the United States has not been publicly reported.

The organization filed a disclosure with the Vermont Attorney General on July 27, 2026.

On April 6, 2026, the SafePay ransomware group posted a claim on the dark web. In the posting, the group stated it had obtained data belonging to AcademyHealth and announced its intention to publish the stolen information within one day.

The types of personal information exposed in the breach included credit and debit account information, financial account codes, government ID numbers and Social Security numbers.

AcademyHealth's response to the breach

Affected individuals should watch for official correspondence from AcademyHealth regarding the breach. Individuals who receive a notification letter should read it carefully and follow any instructions provided.

Individuals who are uncertain whether a notification they have received is genuine can contact AcademyHealth directly through the organization's official website to confirm its authenticity.

(ndividuals who have any connection to AcademyHealth, whether as members, conference attendees, program participants or other stakeholders, should consider taking steps to protect their personal and financial information.