Modern Health Reports Data Breach Affecting Member Medical Profiles
Learn More
Modern Health, a mental health platform based in San Francisco, reports a data breach incident that was detected in November 2025. An individual within the company's own provider network broke into member profiles on the behavioral health platform.
The company disabled the compromised accounts and started a legal probe into the event. Exposed data includes:
- Protected Health Information (PHI)
- Member profile details
- Behavioral health record
A disclosure filed on January 16, 2026, confirmed that at least two people in Massachusetts were affected but the total number of affected individuals is not disclosed.
Modern Health finished identifying all victims by January 5, 2026, and sent out notification emails a week later.
To prevent future incidents, Modern Health is changing how it vets new providers and is giving staff more security training. They are also working with outside legal experts to review their internal security rules and onboarding workflows.
The company suggests that users place fraud alerts or credit freezes with major credit bureaus and be careful of phishing attacks.
