CHARLOTTESVILLE, Va. On November 9th / PRNewswire / -- Dorsata, Inc. It indicates that a data security incident has occurred with the third-party software Metabase they are using, which may involve protected health information belonging to patients. Dorsata is currently sending letters to the individuals who may have been affected, notifying them of this incident and providing assistance resources.
Around August 12, 2026, Dorsata received a notification indicating that there was a security vulnerability in the Metabase business intelligence software they were using. The company promptly patched the software and conducted an investigation with the assistance of independent cybersecurity experts. The investigation revealed that this security vulnerability allowed unauthorized parties to access their database platform, which stored medical information related to patients of Dorsata's healthcare service providers, from August 10 to August 12, 2026. Subsequently, Dorsata reviewed the data involved in the incident to identify individuals who may have been affected. It should be noted that there is currently no evidence to suggest that any potentially affected information was misused or that attempts were made to misuse it.
On October 21, 2026, Dorsata began to send notification letters to individuals who may have been involved in this incident, informing them of what happened and what steps they could take to protect their information.
According to the investigation into this incident, the following personal and protected health information may have been affected: name, address, patient ID, date of birth, vital signs data, treatment information, treatment location, name of the healthcare provider, vaccines, medications, health insurance information, as well as medical history contained in the patient's medical records. Social security numbers, driver's license numbers, and financial information have not been affected.
Dorsata indicates that the company places great importance on patient information security and has taken measures to prevent similar incidents from occurring in the future, including installing the security patches and updates provided by Metabase to institutions using its software. The notification letters sent to individuals who may have been affected also contain steps to help them protect their information.
Dorsata has established a free call center to answer questions regarding this incident and related matters. The toll-free number is 800-655-5832, and it is available from 8:00 AM to 8:00 PM Eastern Time, Monday through Friday, except for major holidays.
Dorsata It is of utmost importance to protect the privacy and security of patients' confidential health information, and the company expresses its deep regret for any inconvenience or concern that this incident may have caused.
