Skip to content
Color theme
Verified Public Facts

What One Medical has publicly confirmed.

One Medical's June 17, 2026 post describes unauthorized access to a third-party storage system used for archived Iora Health information.

Current public timeline

  • June 13, 2026: One Medical says it learned that an unauthorized person accessed a third-party file storage system.
  • June 17, 2026: One Medical publicly posted the data security event notice.
  • One Medical says it deactivated the system, revoked access, started an investigation, and is notifying affected patients directly.

Who the notice focuses on

The company statement focuses on a limited number of legacy Iora Health and One Medical Seniors patients. Iora Health was acquired by One Medical in 2021 and now operates as One Medical Senior Health.

System scope

One Medical says the event was isolated to the third-party file storage system and that no other One Medical or Amazon systems were impacted. The intake form is built around that verified public scope.

Unconfirmed claims

Some public reporting has discussed threat-actor claims about larger data volumes. The intake form does not rely on those claims unless they are later confirmed by One Medical, Amazon, regulators, court filings, or other reliable sources.