#United States #Data Security #Charlottesville #Dorsata #Metabase

Dorsata, Inc. Notifies Patients of Data Security Incident

In a recent announcement, Dorsata, Inc., a healthcare technology company based in Charlottesville, Virginia, disclosed a potential data security incident involving Metabase, a third-party software provider they utilize for business intelligence. This incident has raised concerns regarding the security of certain patient health information, prompting Dorsata to take immediate action to notify affected individuals and provide support.

On August 12, 2026, Dorsata was alerted to a security vulnerability within the Metabase software. This vulnerability, which lasted from August 10 to August 12, may have enabled unauthorized access to a database storing sensitive medical information pertaining to patients associated with Dorsata's healthcare provider partners. In response, Dorsata swiftly implemented necessary security patches and engaged independent cybersecurity experts to conduct a thorough investigation to determine the extent of the breach.

The investigation revealed that specific types of personal and protected health information could have been impacted during the incident. This includes patients' names, addresses, patient IDs, dates of birth, vital statistics, treatment details, provider names, vaccination records, medications, health insurance data, and medical histories. Significantly, it was confirmed that sensitive information such as social security numbers, driver's license numbers, and financial records were not exposed during this breach.

To ensure that those potentially affected are informed, Dorsata began distributing letters to impacted individuals starting on October 21, 2026. These letters outline the nature of the incident, the information potentially involved, and actionable steps that recipients can take to safeguard their personal data moving forward. The company has stressed its commitment to the privacy and protection of patient information, expressing profound regret for any distress this incident may have caused.

In conjunction with these notifications, Dorsata has established a toll-free call center specifically geared towards addressing queries related to the data breach. Available Monday through Friday, from 8 AM to 8 PM ET (excluding major holidays), the center offers a direct line at 800-655-5832 for patients to voice their concerns and seek guidance.

Dorsata takes this incident seriously and has implemented several measures aimed at preventing similar occurrences in the future. These include the prompt installation of security updates provided by Metabase and ongoing monitoring of their systems to ensure vulnerabilities are identified and addressed proactively.

The importance of data security in healthcare settings cannot be overstated, as breaches can have serious implications for patients and providers alike. Dorsata is committed to transparency and will continue to keep its stakeholders informed regarding the incident and any further updates that may arise. As the situation unfolds, the company emphasizes that protecting the health information of patients is not just a responsibility, but a priority that guides all its operational practices.

As healthcare increasingly integrates technology, companies like Dorsata must remain vigilant in their cybersecurity efforts to safeguard sensitive patient data against the evolving nature of cyber threats. This incident serves as a critical reminder of the vulnerabilities present in the healthcare technology sector and the need for continuous improvement and swift action in the face of security challenges.