Charlottesville, Virginia, October 21, 2026 / PRNewswire / -- Dorsata , Inc. The company has become aware of a data security incident involving third-party software Metabase that it uses, which may have involved protected health information of patients. Dorsata is sending letters to individuals who may have been affected to inform them of this incident and provide them with relevant resources.
According to the company, on approximately August 12, 2026, Dorsata received a notification indicating that there was a security vulnerability in the Metabase business intelligence software they were using. The company promptly patched the software and conducted an investigation with the assistance of independent cybersecurity experts. The investigation revealed that this vulnerability allowed unauthorized parties to access their database platform, which stored medical information related to patients of Dorsata's healthcare service partners, from August 10 to August 12, 2026. Subsequently, Dorsata reviewed the data involved in this incident to identify individuals who may have been affected by the information. The company stated that there is currently no evidence to suggest that any potentially affected information was misused or that there were attempts to misuse it.
On October 21, 2026, Dorsata began to send notification letters to individuals who may have been involved in this incident, explaining the course of the event and the protective measures they could take.
According to the investigation of this incident, the information that may be involved includes: name, address, patient ID, date of birth, vital signs data, treatment information, treatment location, doctor's name, vaccines, medications, health insurance information, as well as the medical history contained in the patient's medical records. Social security numbers, driver's license numbers, and financial information have not been affected.
Dorsata indicates that the company places great importance on patient information security and has taken measures to prevent similar incidents from occurring again, including installing the security patches and updates provided by Metabase to institutions using its software. The notification letters sent to individuals who may have been affected also contain relevant steps that can be used to protect the information.
Dorsata has also established a free hotline to answer questions regarding this incident and related matters. The hotline number is 800-655-5832, and it is available from 8:00 AM to 8:00 PM Eastern Time, Monday through Friday, except for major holidays.
Dorsata indicates that the privacy and protection of protected health information is a top priority for the company, and we express our deep regret for any inconvenience or concern that may arise from this incident.
