Notice letters or emails
Save the full One Medical or Iora notice, including the envelope, email headers, attachments, notice date, and any reference numbers.
Investigation · Healthcare Data
One Medical Data Security Investigation
Hall Attorneys is evaluating potential claims for One Medical Seniors and legacy Iora Health patients after One Medical disclosed unauthorized access to a third-party archived file storage system used for legacy Iora Health information.
Who may want to contact us
One Medical Seniors and Iora patients
The investigation is focused on people connected to One Medical Seniors or legacy Iora Health records, especially those who received notice or are helping an affected senior patient evaluate next steps.
One Medical Seniors patients who received a notice
Former or legacy Iora Health patients who received a notice
Authorized caregivers or family members helping an affected senior patient
Patients whose notice references archived clinical, insurance, billing, identifier, or contact information
What to preserve
Keep records before sending anything sensitive
Preserve the documents below, but do not send highly sensitive medical records, Social Security numbers, diagnoses, or raw files through ordinary website forms.
Patient portal messages
Preserve screenshots or PDFs of portal alerts, account messages, and related communications. Include the date and URL where possible.
Insurance, Medicare, or billing activity
Keep explanations of benefits, insurer correspondence, billing notices, Medicare-related communications, and records of unusual activity.
Suspicious calls, texts, or emails
Document phishing attempts, medical-identity concerns, password resets, or communications that appear connected to One Medical, Iora, insurers, or healthcare accounts.
Time and expenses
Track time spent reviewing notices, calling providers, monitoring accounts, freezing credit, replacing cards, or dealing with insurance or medical-identity concerns.
Investigation focus
Issues under review
Hall Attorneys is reviewing the public notice, affected patient categories, data involved, notice timing, safeguards, and follow-on harms reported by patients or caregivers.
- What information was stored in the archived Iora Health file system
- Which One Medical Seniors and legacy Iora patients were affected
- Whether health, insurance, billing, Medicare, date-of-birth, contact, or identifier information was involved
- How the third-party file storage system was protected and monitored
- Whether affected patients received timely, complete, and understandable notice
- Whether affected patients experienced phishing, medical identity theft, insurance issues, out-of-pocket costs, or time loss
Contact the firm
Received a One Medical or Iora notice?
Contact Hall Attorneys with your name, contact information, general relationship to One Medical Seniors or Iora Health, and the date of any notice. Do not include diagnoses, account numbers, Social Security numbers, or raw medical records in an initial message.
Common questions
One Medical investigation FAQ
Is this a filed One Medical lawsuit?
This page describes an investigation by Hall Attorneys. It does not state that a lawsuit has been filed by Hall Attorneys over the One Medical Seniors or Iora Health incident.
Who may be affected?
People may be affected if they received a One Medical, One Medical Seniors, or Iora Health notice, or if they are authorized caregivers helping a senior patient whose archived Iora Health information may have been involved.
What did One Medical say happened?
One Medical stated that it learned on June 13, 2026 of unauthorized access to a third-party file storage system used to archive legacy Iora Health information. One Medical also stated that no other One Medical or Amazon systems were impacted.
Should I send medical records through this website?
No. Do not send Social Security numbers, medical record numbers, diagnoses, raw medical files, full dates of birth, or other highly sensitive records through ordinary website forms. Preserve those materials and wait for secure follow-up if they are needed.
What should I do now?
Preserve your notice, portal messages, insurance or billing correspondence, and any suspicious communications. Keep a written timeline of time spent, expenses, and any fraud or medical-identity concerns.