The Manage My Health portal detected unauthorized access to its Health Documents module on Dec 30, 2025, affecting roughly 6–7% of its 1.8 million users. The company warned that exposed documentation could be used for identity‑theft, targeted phishing and impersonation scams.

Manage My Health reported unauthorized access to its Health Documents module that was detected on Dec 30, 2025, and said the breach exposed records belonging to approximately 6–7% of its 1.8 million users. While the incident did not reportedly involve financial systems, security experts warn that stolen health documentation is highly valuable to fraudsters because it enables convincing identity‑theft, insurance scams, credential stuffing and personalized phishing attacks. Exposed items may include clinical notes, test results and other personally identifiable health information that can be weaponized to convincingly impersonate victims in subsequent social‑engineering campaigns. The company indicated it is investigating the intrusion, notifying affected users and coordinating with regulators; it also recommended that those impacted monitor accounts, watch for suspicious communications, and consider credit and identity protections. For fraud monitors and victim advocates, the breach reinforces the need to treat health data exposures as a critical vector for downstream financial and social‑engineering crimes and to prioritize rapid notification, remediation and user education.