
HealthStream Inc., a Nashville-based healthcare technology company, disclosed a data breach that involved unauthorized access to a portion of its internal corporate network.
On July 19, 2026, HealthStream became aware of suspicious activity within a portion of its internal corporate network. The company launched an investigation with the assistance of third-party cybersecurity specialists to determine the nature and scope of the event.
The investigation determined that between July 16 and July 17, 2026, an unauthorized party gained access to and copied a number of files within the corporate network.
Following the discovery, HealthStream performed a detailed review of the affected data. On Aug. 11, 2026, the company learned that personal information related to certain individuals was present in the compromised data.
The types of personal information exposed included names, Social Security numbers and driver's license numbers.
The breach was disclosed to the attorneys general offices of Massachusetts, New Hampshire and Vermont starting on Sept. 14, 2026. HealthStream began notifying affected individuals on Sept. 14, 2026.
HealthStream is offering 24 months of free credit monitoring and identity theft protection services through Epiq Privacy Solutions ID.
To enroll, affected individuals should visit www.privacysolutionsid.com, click "Activate Account" and enter the activation code included in their notification letter. Each letter contains a specific enrollment deadline. Individuals who need help with enrollment or have questions about the monitoring services can call Epiq directly at 866-675-2006, Monday through Friday from 9 a.m. to 5:30 p.m. ET.
HealthStream has also set up a dedicated assistance line for questions about the incident. Affected individuals can call 888-650-4098, Monday through Friday from 9 a.m. to 9 p.m. ET, excluding major U.S. holidays. Individuals may also write to HealthStream Inc at 500 11th Ave. N., Suite 850, Nashville, TN 37203.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)