Diana Health, Inc. Data Breach

Diana Health, Inc., a healthcare organization, has notified regulators of a data breach involving Social Security numbers — with few other details made public so far.

Diana Health, Inc. reported a data breach to the Vermont Attorney General on August 28, 2026, categorized as “Health Care.” The filing confirms exposure of Social Security numbers. Diana Health has not disclosed a total number of affected individuals, additional data categories beyond Social Security numbers, or when the underlying intrusion or discovery occurred.

Source: Vermont Attorney General Security Breach Notice for Diana Health, Inc. (reported 08/28/2026).

What We Don’t Yet Know

This is an early-stage disclosure. Diana Health’s regulatory filing is limited to confirming that Social Security numbers were involved; it does not include a population count, a full breakdown of other data types, or a timeline for when the breach occurred or was discovered. Emery | Reddy is monitoring for additional detail as it becomes available, including any formal notice letters sent directly to affected individuals.

What Information Was Exposed?

• Social Security number

Diana Health has not confirmed whether other categories of information, such as names, addresses, or medical or insurance information, were also involved. If you received a notice letter, it should list the specific categories that applied to you.

How Many People Are Affected?

Diana Health has not disclosed a total number of affected individuals in its Vermont regulatory filing.

What Is Diana Health Offering Affected Individuals?

Diana Health has not publicly disclosed whether it is offering credit monitoring or identity protection services. Anyone who received a notice letter should review it directly for enrollment instructions or contact information specific to the offer made to them.

Your Information Is at Risk

A Social Security number on its own is enough to attempt new-account fraud, tax fraud, and other forms of identity theft, even without additional data like a name or address attached in the public record. Affected individuals should monitor credit reports, tax filings, and financial accounts for unfamiliar activity.

Do You Have Legal Options?

Healthcare organizations that collect and store Social Security numbers have a legal duty to secure that data and to notify affected individuals without unreasonable delay.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review if you received a notice letter from Diana Health, Inc.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

FAQ

Who is affected by the Diana Health data breach?

Diana Health has not disclosed a total number of affected individuals. Its Vermont regulatory filing confirms only that Social Security numbers were involved.

What information was exposed?

Diana Health’s filing confirms Social Security numbers were exposed. It does not specify whether other information, such as names, addresses, or health information, was also involved. Check any notice letter you receive for the full list that applies to you.

When did the breach happen?

Diana Health’s Vermont filing does not disclose an intrusion or discovery date. The notice was reported to Vermont regulators on August 28, 2026.

Why is there so little information available right now?

This is an early-stage disclosure based on a state regulatory filing rather than a detailed public notice letter. More detail is expected as Diana Health’s investigation continues and formal notice letters go out.

Has a lawsuit been filed against Diana Health over this?

Not that we’ve found as of this writing. Emery | Reddy is currently investigating potential claims and gathering information from affected individuals.

Do I have a legal claim?

Healthcare organizations that collect and store Social Security numbers have a legal duty to secure that data and to notify affected individuals without unreasonable delay. If you received a notice letter from Diana Health, Inc., contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.