SunCloud Health is committed to protecting the privacy and security of the information in our care. On July 23, 2026, we began mailing notification letters to certain patients whose information was involved in a data security incident.
We recently completed an investigation related to an email phishing incident that occurred between April 22, 2026 and May 4, 2026. SunCloud Health employees noticed unusual activity in email accounts and promptly took steps to secure the accounts and third-party experts were engaged to investigate.
During the incident, various emails were accessed or potentially accessed in some of our email accounts. We performed a data review to determine if any of the accessed or potentially accessed items contained patient information. On June 16, 2026, we determined that one or more emails and/or attachments that were accessed or potentially accessed included patient names and medical information related to their assessment provided by SunCloud Health, such as diagnoses, medications, and/or other recommended treatment details being internally contemplated in the initial assessment process.
We recommend that patients review the statements they receive from their healthcare providers and health insurance plan. If they see any services that were not received, they should contact the provider or health plan immediately.
We take this matter very seriously. Upon learning of this incident, we immediately launched an investigation and engaged information technology professionals and other experts who specialize in how to properly address these types of situations. To help reduce the risk of similar incidents like this from happening again, we have enhanced our existing security protocols to further strengthen the protection of personal information. We continue to monitor our systems and evaluate additional safeguards to help protect the information entrusted to us.
If patients have any additional questions they can reach us at 888-459-4294 or at incident@suncloudhealth.com.