Amazon’s One Medical Seniors hacked by ShinyHunters, issues “final warning” on 8.8 TB of patient data

Pepper faints again, reading Amazon’s response–it’s ‘archived’ data that “only impacts certain legacy Iora Health and One Medical Seniors patients”.  The ShinyHunters data extortion group published their ‘final warning’ on its ‘dark web’ site with a negotiation start date of last Monday (22 June) before they would publish 8.8 terabytes of stolen information. Making the ShinyHunters threat less credible is that they haven’t released any sample data, so there is no idea if the contents are high value–typically containing personally identifiable information such as Social Security number, credit cards, and sensitive health information. Amazon One Medical is admitting the loss of only a “subset of files containing demographic and clinical records”.

Amazon One Medical published a notification on its One Medical Seniors (the former Iora Medical) website summing up the following:

  • They learned on 13 June that a third-party file storage system used to store archived patient information had been accessed by an unauthorized person
  • Data had been exfiltrated between 8-11 June
  • It’s apparently “legacy” information only and affecting only certain old Iora/Amazon One Medical Seniors records
  • The clinics affected are legacy Iora clinics located in Atlanta, Cape Cod, Charlotte, Piedmont Triad, Denver, Houston, Phoenix, Tucson, and Seattle.
  • They took immediate action including the revocation of all user access and rotating credentials for all employees with access to the system. 
  • Neither Amazon One Medical (non-Seniors) patients, Seniors patients outside these markets, nor their EHR and medical services have been affected.

Patients are given a number to call and an email to write if they have questions. It is not known if patients were notified in other ways, for example through the patient portal, email, or standard US Mail. There is no public indication that Amazon One Medical has contacted ShinyHunters or is negotiating with them, whoever they are.

ShinyHunters is notorious for taking credit for other attacks on healthcare organizations, always going big, then going home after gaining their ransom. Their last target was Medtronic, hacking 9 million patient records plus terabytes of corporate information in April [TTA 30 April]. After the leak information was pulled from their website, the conclusion was that Medtronic paid up. ShinyHunters also attacked dental benefits administrator DentaQuest earlier this year. Other big game: Zara, Carnival, 7-Eleven, Pitney Bowes, The Canada Life Assurance Company, and Hallmark. 

Amazon One Medical is staying mum, but this will be updated as additional information is disclosed. Cybernews, Healthcare IT News, HIPAA Journal

News bites: Amazon Pharmacy’s same-day delivery zooms, One Medical’s lab results app, OpenEvidence’s valuation shock, NYU Langone-Isaac Health, HealthMark buys Purview, Harbor Health buys Rippl, big raises for Solace Health, Talkiatry

Amazon Pharmacy growing same-day prescription delivery to 6,500 cities and towns by end of 2026. This adds nearly 2,000 locations. Amazon currently delivers to all 50 states and DC with either same day or next day delivery. Same day is adding locations in two new states, Idaho and Massachusetts. The release rather amusingly lists the horses they use on Mackinac Island, Michigan (no cars or e-anything), e-bikes in Manhattan, EVs in the suburbs, and One Medical kiosks in Los Angeles, which debuted last October. Amazon also touted their savings outside of insurance, an item much in the news with TrumpRx.com–up to 80% on generic medications and 40% on brand-name medications through Prime Rx at no additional cost. What does this mean for telehealth competition? A drop in stock price for Teladoc, Hims & Hers (added to by a GLP-1 pill patent infringement suit by Novo Nordisk), and battered Doximity (Doximity Dialer). Yahoo Finance, TechCrunch  

Amazon’s clinic network, One Medical, premiers a ‘beta feature’ that analyzes personal lab results. The Health Insights feature, developed in partnership with Lifeforce, is on the Lab Results tab. After answering a questionnaire, the patient can see an AI-generated:

  • Personalized wellness score based on their biomarker profile
  • Detailed analysis of individual biomarkers categorized by health domain
  • Evidence-based lifestyle recommendations around nutrition, physical activity, stress management, and sleep
  • Scientific references supporting each recommendation

This Editor noted that One Medical is gradually transitioning to an Amazon identity and logotype. Release

Shocked, shocked at OpenEvidence’s $12 billion valuation? According to Katie Adams in MedCityNews, mais non. We noted at the end of January, when OpenEvidence collected $250 million in a Series D, that it was this year’s “hot number”. Certainly it’s “IT” with the docs as a reference source, claiming daily average usage by 40% of US doctors in 10,000 hospitals and medical centers. More than 757,000 clinicians use their free search engine trained on journals and clinical medical data only, coupled with an AI chatbot agent. It does a job that Doximity, Epocrates, and Medscape aren’t doing. It also dispenses with going through organizations as it permits direct signup. Pharma likes the model and votes with its shrinking dollars, giving OpenEvidence a $100 million revenue run rate. So do investors, who’ve socked $700 million into the company since 2021. There’s nothing like being the ‘up and comer’, as was said on a recent analyst call this Editor was on.

Isaac Health partners with NYU Langone for virtual dementia care. The NYC-based health system, with a strong base in neurology and brain health, seeks to reduce the time for a referral and testing for cognitive impairments. With Isaac, the patient is scheduled quickly, usually within a week, for a virtual consult. Isaac is integrated with NYU Langone’s systems to combine virtual with in-person care. If the patient is not comfortable with technology or the visit, a trained helper can be sent to the home to help manage the virtual visit. Isaac releaseMedCityNews

M&A and raises, in contrast to 2025, remain busy

HealthMark Group buys Purview. Purview’s cloud-based systems provide quick access to ingestion, analysis and sharing of medical imaging data, providing access to imaging records quickly. HealthMark Group is a provider of clinical information exchange solutions for healthcare providers. Acquisition cost was not disclosed, but Annapolis MD based Purview is listed as having less than 10 employees on Crunchbase with no funding listed, while HealthMark Group was refinanced last July by TA Associates private equity, retaining an interest from Ridgemont Equity Partners.   Release

Austin, Texas-based Harbor Health is acquiring dementia care platform Rippl. Harbor Health combines a clinic network in Texas with health plans. Most of the clinics are in Austin with expansion to El Paso, San Antonio, and Dallas via last year’s acquisition of 32 VillageMD clinics [TTA 9 October 2025]. Rippl’s platform is designed to support care at home for those with dementia via early detection of physical and behavioral issues. Rippl is also obtaining additional financing from seven investors including General Catalyst and Google Ventures. Acquisition cost was not disclosed. Harbor Health release

And to close, two hefty later-stage raises:

  • Solace Health notched a surprising $130 million Series C. It provides healthcare navigation via advocates for patients requiring guidance on a new diagnosis, needing referrals, understanding insurance coverage, and care coordination. Costs are covered by Medicare, most Medicare Advantage plans and some health insurance carriers. The round was led by IVP, with participation from Menlo Ventures, SignalFire, Torch Capital, Inspired Capital and RiverPark Ventures. This topped last year’s $60 million Series B for a total $211 million financing since 2021. Valuation entered unicorn territory of over $1 billion. MedCityNews, Mobihealthnews 
  • Talkiatry raised $210 million in a Series D, but presently no plans for an IPO. Their total financing now tops $400 million. Talkiatry was an early entrant (2019) in virtual psychiatry and therapy, and employs over 800 psychiatrists and 300 therapists, delivering 3 million patient visits to date. Another asset is that it is in-network with over 100 payers. The round was led by Perceptive Advisors with four other participants. MedCityNews