Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Blossom Health

healthcare (behavioral health) · United States (CA and TX notices; 2,014 Texans per a claims-site summary)

Confirmed

What happened

Access to the EHR software through a phishing attack on a non-employee contractor. Patient names, contact information and health insurance information were viewed. No SSN or payment card data, per the notice.

Mental health patients' identities were exposed. A Russian-language report says an actor claimed data on about 29,000 clients and sent the extortion message to patients (CLAIMED).

What remains unknown

  • total affected
  • whether patients were contacted directly by the actor (claim only)

Losses: unknown

Capital around this company

  • Listed investor
    Village Global Management, L.L.C.
    Investor portfolio page

    The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.

Sources

  1. California AG data breach list (entries reported 28 to 30 Oct 2026) · 2026-10-30
  2. Blossom BH Opco notice letter (CA AG sb24-632068) · 2026-10-29
  3. Blossom Health breach summaries (ClaimDepot; techora.ru report of actor claim) · 2026

Does Blossom Health touch your portfolio?

We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.

Request an exposure check