Healthcare Highways, LLC

Timeline

1. March 17, 2026
   Press coverage Press

   press report (acknowledged): The forensic investigation determined that an unauthorized third party first accessed its network on or around March 17, 2026, and encrypted files.

   ^source
2. August 21, 2026
   Press coverage Press

   press report (acknowledged): Photon Health learned on August 21, 2026, that a previously unknown security flaw in a self-hosted third-party application called Metabase had been exploited.

   ^source
3. September 4, 2026
   Press coverage Press

   press report (acknowledged): Photon Health completed its data review on September 4, 2026, when it was confirmed that data compromised in the incident included names, addresses, phone numbers, birth dates, and prescription information.

   ^source
4. October 6, 2026
   Reported to regulator Regulator

   TX AG breach notification: 0 Texas residents affected

   ^source
5. October 8, 2026
   Press coverage Press

   press report (individuals_notified): Notification letters started to be mailed to the affected individuals on October 8, 2026.

   ^source