One Medical Seniors Data Breach Exposes Info for 15,000+ Patients

One Medical Seniors, the Medicare-focused primary care division of Amazon's One Medical, disclosed a data breach in June 2026 affecting patients at clinics across nine U.S. markets.

The breach has so far impacted 10,041 Texas residents and 5,410 Massachusetts residents. The company began notifying affected individuals by U.S. Mail on June 29, 2026, and posted a notice on its website.

On June 13, 2026, One Medical Seniors discovered that an unauthorized person had gained access to a third-party file-storage system used to retain archived information for One Medical Seniors. The archived files came from the Iora Health era, before Iora was acquired by One Medical in 2021 and later rebranded as One Medical Seniors.

An investigation determined that the unauthorized access occurred from June 8 through June 11, 2026.

On June 17, 2026, a threat actor known as ShinyHunters posted a claim on the Tor network alleging responsibility for the breach. The posting claimed the actor had obtained 8.8 terabytes of data from One Medical.

The types of information exposed varied by individual, including names, addresses, dates of birth, contact information, Social Security numbers, medical records, treatment plans, diagnostic information, imaging and prescriptions, and billing-related information such as Medicare numbers and health insurance details.

One Medical Seniors' response to the breach

The company is offering affected individuals a free 24-month membership to Experian IdentityWorks Credit 3B. Affected individuals can enroll at the Experian IdentityWorks enrollment page using the activation code included in their notification letter before Sept. 30, 2026.

The membership includes credit monitoring across all three major credit bureaus, daily credit reports for online members, identity restoration support and $1 million in identity theft insurance.

Affected individuals with questions about the breach or who need help activating their credit monitoring membership can call 833-745-1398, Monday through Friday, from 7 a.m. to 7 p.m. in all continental U.S. time zones, excluding major holidays. Individuals may also contact One Medical by email at privacy@onemedical.com.