Business

Nearly 150,000 patient records exposed in major healthcare data breach – here’s what we know

By Sead Fadilpašić

Copyright techradar

Nearly 150,000 patient records exposed in major healthcare data breach - here's what we know

Skip to main content

Tech Radar Pro

Tech Radar Gaming

Close main menu

the business technology experts

België (Nederlands)

Deutschland

North America

US (English)

Australasia

New Zealand

View Profile

Search TechRadar

Expert Insights

Website builders

Web hosting

Best web hosting
Best office chairs
Best website builder
Best antivirus
Expert Insights

Don’t miss these

Nearly 250,000 records leaked in major tax consultancy breach – here’s what we know

MRI scans, X-rays and more leaked online in major breach – over a million healthcare devices affected, here’s what we know

Major healthcare service breach exposes data on over 600,000 people – names, SSNs, and more stolen, here’s what we know

Over 1 million records from US adoption organization left exposed online

Top auto insurance firm leaked over 5 million records – here’s what we know

Massive database containing identity info on 252 million people leaked online – here’s what we know

Huge theft reportedly sees 2TB of private data stolen – police files hit in major breach

Huge healthcare breach sees nearly a million patients hit following DaVita ransomware attack – make sure you’re safe

Over 26 million resumes exposed in top CV maker data breach – here’s what we know

European healthcare giant AMEOS reveals data breach – millions of users warned to be on their guard, here’s what we know

Major breach sees 100 million data records on citizens leaked – here’s what we know

This major cybercrime forum might have just exposed all its users

Major breach at medical billing giant sees data on 5.4 million users stolen – here’s what we know

Major hack hit NY Business Council – over 47,000 people affected, here’s how to stay safe

Insurance group Kelly Benefits says over half a million people now affected in major data breach – here’s what we know

Nearly 150,000 patient records exposed in major healthcare data breach – here’s what we know

Sead Fadilpašić

26 September 2025

Archer Health kept an unprotected database on the internet

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

(Image credit: Pixabay)

Archer Health exposed 145,000 sensitive files through an unprotected, publicly accessible database
Leaked data included names, SSNs, diagnoses, and other personal and medical information
Database was secured after researcher’s tip; no evidence of dark web distribution yet

Archer Health, a US-based in-home and palliative care service provider, kept an unprotected database available on the wider internet, leaking sensitive personal and health data to anyone who knew where to look, experts have warned.

Cybersecurity researcher Jeremiah Fowler flagged the finding to WebsitePlanet after finding the database and helping it get locked down.
Fowler found an unencrypted, non-password-protected database containing roughly 145,000 files, including PDF, PNG, and other files, and held documents such as various assessments, home health certifications, plan of care documents, discharge forms, and other internal documents.

You may like

Nearly 250,000 records leaked in major tax consultancy breach – here’s what we know

MRI scans, X-rays and more leaked online in major breach – over a million healthcare devices affected, here’s what we know

Major healthcare service breach exposes data on over 600,000 people – names, SSNs, and more stolen, here’s what we know

Locking the database down
Overall, these files, which and measured in at 23GB, also contained people’s names, patient ID numbers, SSNs, postal addresses, phone numbers, and other personally identifiable information (PII). Other documents contained diagnoses, treatments, and other potentially sensitive healthcare data.

Archer Health, also known as Archer Home Health/Home Health & Palliative Care) is a provider of in-home medical services. The company offers skilled nursing, therapy (physical, speech, occupational), nutritional guidance, medical social work, home health aides, wound care, and more., delivered in the patient’s home.
They also provide palliative care, focusing on symptom relief, disease management, comfort, and support for patients with serious or chronic illness.
Soon after Fowler reached out, the company locked the database down, and thanked the researcher for the tip.

Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
“Thank you for bringing this to our attention,” Archer Health told Fowler. “We take data security and patient privacy very seriously. Our team is actively investigating this matter and will address any security issues promptly.”
Without proper forensic analysis, it is impossible to say if someone accessed the database before Fowler found it. There is no evidence that this database was leaked anywhere on the dark web. Furthermore, we don’t know for how long the archive remained open, or who managed it (Archer Health or a third party).
You might also like

Data center firm leaks massive 38GB database containing thousands of personal records online
Take a look at our guide to the best authenticator app
We’ve rounded up the best password managers

Sead Fadilpašić

Social Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Nearly 250,000 records leaked in major tax consultancy breach – here’s what we know

MRI scans, X-rays and more leaked online in major breach – over a million healthcare devices affected, here’s what we know

Major healthcare service breach exposes data on over 600,000 people – names, SSNs, and more stolen, here’s what we know

Over 1 million records from US adoption organization left exposed online

Top auto insurance firm leaked over 5 million records – here’s what we know

Massive database containing identity info on 252 million people leaked online – here’s what we know

Latest in Security

US Government tells agencies to patch Cisco firewalls immediately, or face attack

“AI security is identity security” – how Okta is weaving agents into the security fabric

UK government says a new AI tool helped it recover almost £500 million in fraud losses – and now it’s going global

Jaguar Land Rover facing costs of “millions per week” following cyberattack – due to a lack of insurance cover

OnePlus phone flaw could let devices send out unwanted text messages – so take care who you ping

Under the radar – Google warns new Brickstorm malware was stealing data from US firms for over a year

Latest in News

Quordle hints and answers for Saturday, September 27 (game #1342)

NYT Strands hints and answers for Saturday, September 27 (game #573)

NYT Connections hints and answers for Saturday, September 27 (game #839)

Nearly 150,000 patient records exposed in major healthcare data breach – here’s what we know

How to watch Power Book IV: Force season 3 online — when is it coming out?

Hands-on video leak reveals Samsung Galaxy One UI 8.5 – and it’s borrowing a handy iPhone trick

LATEST ARTICLES

Quordle hints and answers for Saturday, September 27 (game #1342)

7 new movies and TV shows to watch on Netflix, Prime Video, Disney+ and more this weekend (September 26)

NYT Connections hints and answers for Saturday, September 27 (game #839)

NYT Strands hints and answers for Saturday, September 27 (game #573)

I was surprised by just how well this thin and lightweight gaming laptop, the Asus ROG Zephyrus G14 (2025), performed – but you’ll have to endure its sizzling temperatures

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Contact Future’s experts

Terms and conditions

Privacy policy

Cookies policy

Advertise with us

Web notifications

Accessibility Statement

Future US, Inc. Full 7th Floor, 130 West 42nd Street,

Please login or signup to comment

Please wait…