2
Published signals
currently linked to this company
Company intelligence
Unionhealth cybersecurity incidents and threat signals
unionhealth.org
This company page brings together public reporting currently associated with Unionhealth. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
0
Last 90 days
recent published signals
1
High or critical
confidence classifications
July 22, 2026
Latest report
most recent published signal
Explore related intelligence
Explore this reporting from another angle
Based on all published signals currently linked to Unionhealth. Affected countries come from victim data; the company country above remains a separate profile fact. Counts describe this reporting set, not overall incident prevalence.
Attack patterns
Confirmed impacts
Company signals
All published signals involving Unionhealth
Union Health System, Inc. Discloses Data Breach Affecting 262,831 Individuals
Data breaches have become an all-too-common reality for businesses in 2026. From small startups to huge corporations, these breaches are impacting everyone and understanding the full scope of the problem is the first step to preventing your business from falling victim. Additionally, the consequences of these breaches are nothing if not substantial. Ransomware attacks, phishing schemes, and even weak passwords are wreaking havoc on businesses, forcing some to shutter their doors when these attacks become too much to bare. That’s why we want to spread the word and keep businesses in the know about what kind of companies are being hit with data breaches, so you can understand exactly how big the problem is and how you can keep your business safe in 2026. Types : Data breaches are the result of a number of types of cyber attacks, including phishing schemes, ransomware attacks, malware, and social engineering. Cost : Statistics vary, but most studies put the cost of a data breach between one and ten million dollars. Business size : No matter the size of your business, data breaches are possible, with big names like McDonald’s and Adidas falling victim. Prevention : Businesses can prevent data breaches by training staff and shoring up cybersecurity measures like two-factor authentication. Lansing Community College: Reportedly, the community college was targeted in February 2026, with more than 170,000 people possibly affected. The college claims that it has “no evidence” that stolen information has been “misused.” Xsolis, Inc: The Tennessee-based healthtech company reveals that it was breached in January 2026 by a suspected phishing attack. As many as 1,396,519 individuals were affected, with Social Security numbers and health insurance information thought to have been stolen. Carnival Corporation: The world’s largest leisure travel and cruise company discloses that it has suffered a massive data breach, with almost 6 million customers thought to have been affected. Compromised information included names, addresses, emails, phone numbers, and dates of birth. GitHub: GitHub confirms a data breach that saw the loss of about four thousand developer code repositories. One threat actor that typically targets open source ecosystems for financial gain, TeamPCP, has taken credit. TeamPCP says it is not offering a ransom, but will instead sell the stolen internal source code and organization data. Open Loop Health : The telehealth platform provider gives more details on a data breach that took place in January: 716,000 individuals were compromised in a breach caused by an unauthorized third party that exfiltrated files containing data including names, addresses, email addresses, dates of birth, and medical information. Instructure : Edtech and learning management company Instructure was breached multiple times by the ShinyHunters extortion gang, prompting the company to pay a ransom in order to regain access to its own data. The cause (at least for the initial breach) was a disruption to certain tools relying on API keys, with a preported loss of 3.65 terabytes of data impacted nearly 9,000 schools worldwide. Heritage Bank: The financial services company reveals that it suffered a data breach between March and April 2026. Personal information belonging to 182,793 individuals is potentially compromised, although the nature of the information is still unknown. Texas Tech University Health Sciences Center: The Oregon Department of Justice reveals that the university department suffered a massive cyberattack in September 2024, with over 800,00 individuals potentially affected. illumifin Corporation: The insurance company is subject to a wide-ranging data breach. It is thought that 97,781 individuals may be affected, with the type of breach and nature of the compromised information still unknown. Restaurant Management Company of Wichita, Inc: The hospitality company experiences a data breach thought to impact up to 52,017 people. Compromised information includes names, addresses, Social Security numbers, and more. Ameriprise Financial, Inc: The financial services company discloses to the Oregon Department of Justice that it was breached in March 2026. The type of information compromised is unknown, but it is thought that as many as 47,876 individuals are affected. Impac Mortgage Holdings, Inc: The mortgage broker reveals that it was affected by a massive cyberattack between February and March 2024. It is thought that up to 61,066 individuals have been affected, with the exposed information still unknown. Georgia Heritage Federal Credit Union: Maine Attorney General notifies affected individuals, who could reach up to 43,077, that the credit union was subject to a ransomware attack in January 2025. Innovative Scientific Solutions, LLC: The South Carolina healthcare provider experiences a cyberattack potentially affecting 143,842 individuals. At the time of the writing, both of the origin of the breach and the compromised information are unknown. Iowa Department of Health and Human Services: The state department experiences a massive data breach resulting in the exposure of Medicaid data belonging to more than 6,000 people. Community Psychiatry Management: California-based practitioner announces that it has experienced a wide-ranging cyberattack, with the personal and health information of around 14,000 individuals exposed in the process. Cookeville Regional Medical Center: More than 330,000 people are thought to have been affected by a massive data breach against the healthcare practitioner. The breach took place in July 2025, with its discovery only recently coming to light.
Union Health System Affected by Oracle Health/Cerner Data Breach
Union Health System, an integrated health system in Indiana, was affected by a security incident at its third-party vendor, Oracle Health/Cerner. On February 24, 2025, Union Health verified claims from an unknown party possessing patient data, identifying the information as likely originating from Oracle Health/Cerner's data migration environment. Oracle Health had detected unauthorized access to legacy Cerner servers on February 20, 2025, with initial access occurring after January 22, 2025. The compromised data for 262,831 individuals included names, Social Security numbers, dates of birth, driver's license numbers, treating physicians, dates of service, medication information, health insurance information, and diagnostic/treatment details. Union Health clarified that its internal systems were not compromised and offered credit monitoring services.
FAQ
Questions about Unionhealth cybersecurity reporting
What does the Unionhealth page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Unionhealth.
Does every mention of Unionhealth appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.