{"id":1466,"date":"2026-09-13T09:59:29","date_gmt":"2026-09-13T14:59:29","guid":{"rendered":"https:\/\/cmitsolutions.com\/lasvegas-nv-1206\/?p=1466"},"modified":"2026-10-21T17:28:42","modified_gmt":"2026-10-21T22:28:42","slug":"vendor-data-breach-alert-las-vegas-businesses","status":"publish","type":"post","link":"https:\/\/cmitsolutions.com\/lasvegas-nv-1206\/blog\/vendor-data-breach-alert-las-vegas-businesses\/","title":{"rendered":"Vendor Data Breach Alert: What Las Vegas Businesses Must Know"},"content":{"rendered":"
\n

Cybersecurity Alert<\/span><\/p>\n

Vendor Data Breach Exposes 3.5 Million Patient Records \u2014 The Warning Every Las Vegas Business Should Heed<\/h2>\n

Healthcare technology giant Veradigm didn’t get hacked directly \u2014 one of its vendors did. That distinction won’t matter to the patients whose Social Security numbers are now for sale.<\/p>\n

Published by CMIT Solutions of Las Vegas \u00b7 Cybersecurity \u00b7 6 min read<\/p>\n<\/div>\n

What Happened at Veradigm<\/h2>\n

On September 8, 2026, healthcare technology company Veradigm disclosed that patient data belonging to a number of its customers had been exposed \u2014 not because Veradigm’s own network was breached, but because an unauthorized party stole credentials from one of its vendors<\/strong>. Those stolen credentials unlocked a Veradigm application programming interface (API) that the vendor used to serve its own customers, and the attacker used that access to download patient records directly.<\/p>\n

A ransomware group calling itself The Gentlemen<\/strong> has claimed responsibility and says it is holding roughly 3.5 million patient records, including full names, home addresses, Social Security numbers, email addresses, phone numbers, and guarantor information. Veradigm says clinical and medical records were not part of the exposure, and that the stolen credentials only reached the limited API \u2014 not its broader network, servers, or databases. The group has threatened to publish the stolen data if a ransom isn’t negotiated.<\/p>\n

Key Takeaway<\/span>
\nVeradigm’s own security wasn’t the failure point. A vendor’s stolen login credentials were enough to pull 3.5 million patient records out the back door \u2014 a reminder that your business is only as secure as every company you’ve handed a password, an API key, or a data-sharing agreement to.<\/em><\/div>\n

How a Stolen Password Becomes a 3.5 Million-Record Breach<\/h2>\n

This wasn’t a sophisticated zero-day exploit or a months-long network intrusion. It was simpler and, in some ways, scarier: a single set of compromised vendor credentials, used against a legitimate API that was designed to share data. The mechanics break down like this:<\/p>\n