BleepingComputer (9 September 2026) covers Veradigm's SEC disclosure of a third-party vendor incident: an attacker obtained vendor credentials for a Veradigm customer-services API and copied patient personal details including some Social Security numbers; clinical/medical content and the broader Veradigm network were not accessed per the filing.

Veradigm says a small number of customers were affected, notified law enforcement, and is offering credit monitoring where applicable.

According to BleepingComputer, Veradigm's disclosure did not identify the attacker; The Gentlemen ransomware group claimed the intrusion on 5 September. Distinct from desk card sharp-office-thegentlemen-20260907 (AU Sharp Office listing).

Primary: BleepingComputer (SEC filing). Updated 24 Oct 2026: the gang's claimed record count has been taken out of the headline and the unverified claimed leak deadline removed. (source: BleepingComputer)

Correction (25 Oct 2026): removed the ransomware group's own claim to be holding 3.5 million patient records; no company, regulator or outlet has confirmed that figure. (source: BleepingComputer)