Veradigm
veradigm.com
Group
Thegentlemen
Discovered
2026-09-05 18:29 UTC
Est. attack date
2026-09-04
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
Description:
veradigm.com zoominfo.com/c/veradigm-llc/471134180
3.5+ million personal patient records with PII full name, address, social security number, email, address, phone number,guarantors PII ,Score Veradigm Inc. is a publicly traded American healthcare technology and data analytics company (OTC: MDRX), the former Allscripts, founded in 1986 and renamed Veradigm in January 2023, headquartered in Chicago with about 2,300–2,600 employees. Its core asset is one of the largest multi-EHR data networks in US healthcare — over 450,000 connected providers and 200M+ patient records — which it monetizes through three segments: Provider (EHR, practice management, revenue cycle: $473M in 2024), Payer (quality and risk adjustment analytics: $67.3M) and Life Sciences (real-world data and AI-driven evidence: $54M).
Infostealer activity detected by HudsonRock
Compromised Employees: 0
Compromised Users: 6
Third Party Employee Credentials: 3
External Attack Surface: 4
Infostealer Distribution
Exposure Report
by ParanoidLab38
Passwords
0 critical
117
Cookies
0 critical
Last queried 2026-09-10 14:30 UTC
DNS Records:
The following DNS records were found for the victim's domain.
WHOIS Emails
- abusegodaddy.com
MX Records
- veradigm-com.mail.protection.outlook.com. Microsoft 365
TXT Records
- cursor-domain-verification-c7dn30=SS8KvfdX1D7SYTFRo31iivxbe
- google-site-verification=McPhhc8-XzNoiTMHRKFhWMbVr31INx_ad3rSG458R10
- slack-domain-verification=j6VOiJZFrCZeLFj8mcfCHdIj8ZjdB96vkxddXrQJ
- v=spf1 exists:%{i}._i.%{d}._d.espf.agari-dns.net include:%{d}.42.spf-protect.agari-dns.net -all
- smartsheet-site-validation=eSlhK-ibXWk2cWSIN2QcSOHqKZ_cO1wX
- ZOOM_verify_cHI4bIjW6bkjskuG9xBAQJ
- cidtls=E106B9A5-3FE0-52C3-A692-A3B22A6DB437
- sinch-domain-verification=eb7528db-969e-4203-adca-c605d220947f
- cidtls=1E3BD596-EC16-F8FD-3D9B-5938D47A1683
- google-site-verification=6QkpNyJ4sGMIMTp8d0Ac4Lerq5T1qXnk4kBF_bpsNts
- mixpanel-domain-verify=7a33ddf4-540d-4249-a602-a9553a77c602
- MS=ms91629989
- adobe-idp-site-verification=a63afa5325b19dc69ede0903f84b677cb753e838edb795805353b6484ca49f30
- n8p6sl5551whcxg8syb2zvfn4369h4kj
- apple-domain-verification=Rdhkcyfya2Gi1jgB
- cidtls=A16D8640-2856-6651-B2AC-5D04F9232541
- bugcrowd-verification=0d0ae71d9aa2497f9eb6a25e84f1071e
- bw=elu36onFfKs5ULMz05T8Xuy/MEDZaDvm2udd7PptEVBT
- p7jk8yy6l35zf76kf1qj470gv3vqdkfp
- status-page-domain-verification=b61w22k99qx6
- anthropic-domain-verification-dn79tv=JBCgvv7BUH9rSu8WrNic9QCei
- cloudhealth=11f1317b-c815-4088-ae46-b89cd52543e2
- wiz-domain-verification=5f183e4304f76741a987aee5d4a1a3cbabdbb3e8bde432da4397e86730d4f712
- docker-verification=6a61d6f4-c29a-4ddb-8327-8b06e5743bd1
- spycloud-domain-verification=e2ed9701-f4c9-4f17-b6f2-6c1873872b44
- MS=ms83400314
- t9rqlzz5k7nqdr9fw1h6ny90td8fw784
- webexdomainverification.4C675B8B5A11B136E053AB06FC0A3F65=27879c87-52d8-4e59-b19a-a606718129b0
- _sy1kqtoo2hwpxf9ydja16gbu7pl0aie
- miro-verification=01313786023bfec08c84e26f2977d8aff3ba64a8
- atlassian-domain-verification=RlOea1f9HzQ4AcGUQm7XXXX7KsK0f8mM4QalngjNq5o/Jv7mn4Al8mDDWsyTRb95
Cloud / SaaS Services Detected
Adobe
Anthropic
Apple
Atlassian
Cisco Webex
Docker
Microsoft 365
Miro
Slack
Smartsheet
Wiz
Zoom
Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.