Dorsata, Inc. Notifies Patients of Metabase Data Security Incident

Dorsata, Inc. Notifies Patients of Metabase Data Security Incident

PR Newswire

CHARLOTTESVILLE, Va., Oct. 21, 2026

CHARLOTTESVILLE, Va., Oct. 21, 2026 /PRNewswire/ -- Dorsata, Inc. has become aware of a data security incident involving the Metabase third-party software it uses that may have involved the protected health information belonging to patients. Dorsata is sending letters to potentially involved individuals to notify them about this incident and provide resources to assist them.

On or about August 12, 2026, Dorsata received a notice that the Metabase business intelligence software it uses contained a security vulnerability. They immediately patched the software and began an investigation with the assistance of independent cybersecurity experts. The investigation determined the Metabase security vulnerability allowed unauthorized access to its database platform that stores medical information related to patients of Dorsata's healthcare provider partners between August 10, 2026 and August 12, 2026. Dorsata then reviewed the data involved in the incident to identify the individuals whose information may have been involved. Please note that there is no evidence of the misuse, or attempted misuse, of any potentially impacted information.

On October 21, 2026, Dorsata began sending notification letters to the individuals potentially involved in this incident providing them information about what happened and steps they can take to protect their information.

Based on the investigation of the incident, the following personal and protected health information may have been involved in the incident: name, address, patient ID, date of birth, vitals data, treatment information, treatment location, provider name, vaccines, medications, health insurance information, and patients' medical history contained in a patient's medical records. Social security numbers, driver's license number, and financial information were not involved. 

Dorsata takes the security of patient information very seriously and has taken steps to prevent a similar event from occurring in the future, including installing the security patches and updates Metabase has provided to entities who use their software. The notification letters Dorsata sent to potentially affected individuals also include information about steps that individuals can take to protect their information.

Dorsata has established a toll-free call center to answer questions about the incident and related concerns. The toll free phone number is 800-655-5832 and is available from 8:00 am to 8:00 pm ET, Monday through Friday, excluding major holidays.

The privacy and protection of protected health information is a top priority for Dorsata, which deeply regrets any inconvenience or concern this incident may cause.

View original content:https://www.prnewswire.com/news-releases/dorsata-inc-notifies-patients-of-metabase-data-security-incident-302916007.html

SOURCE Dorsata, Inc.