Veradigm’s Breach Claims Under Scrutiny After Dark Web Leak

Veradigm’s breach claims are under renewed scrutiny after a Sunflower Medical Group (SMG) data tranche appeared on Rhysida’s dark web leak site, suggesting data from multiple Veradigm clients may have been mixed with SMG’s. DataBreaches[.]Net notes that SMG reported 220,698 affected patients to HHS, while state filings list 65,270 residents affected across Texas, South Carolina, Montana and Massachusetts, with California’s filing lacking numbers; a Goodrum v.

Veradigm settlement proposal hints that up to two million people could have been impacted. The Sunflower incident stems from an access event around 15 December 2024, with SMG learning of the breach on 7 January 2025 and a third‑party investigation confirming the breach on that same date. Rhysida’s listing claimed more than 400,000 driver’s licences, insurance cards and Social Security numbers, with 7.6 TB of data across 5,288,062 files and an SQL database exceeding 3 TB.

DataBreaches says the SMG tranche contained data linked to several Veradigm clients, including Urology Associates of Mobile, Cabarrus Eye Center, and Peachtree Neurological, raising questions about whether the compromised data resided on Veradigm’s storage or SMG’s server.