Blueberry Medical (d/b/a Blueberry Pediatrics) is a California-based pediatric healthcare company specializing in telehealth. The company and Photon Health, one of its service providers, recently experienced separate but related data breaches. Consequently, sensitive information belonging to an undisclosed number of Blueberry Medical patients as well as an undisclosed number of Photon Health customers may have been compromised.
On August 22, 2026, Blueberry Medical discovered evidence of a data breach. A criminal actor stole copies of Blueberry Medical patient data after exploiting a vulnerability at Metabase, one of Blueberry Medical’s technology providers. Photon Health also uses Metabase. A different criminal actor exploited the same Metabase vulnerability to access Photon Health’s network environment from August 9, 2026, through August 12, 2026. During that period of unauthorized access, the criminal actor obtained information belonging to certain Proton Health customers. Protected Health Information (“PHI”) and Personally Identifiable Information (“PII”) were obtained in both the Blueberry Medical and Photon Health data breaches. The Blueberry Medical breach impacted PHI and PII including, but not limited to, patient names, health plan names and policy numbers, dates of birth, and health care information such as medical records, dates of service, medical codes, and charges for services. The Photon Health breach affected PHI and PII including, but not limited to, names, addresses, phone numbers, dates of birth, and prescription medication information.
If you receive a breach notice letter from Blueberry Medical, Photon Health, or Metabase, you can contact Goldenberg Schneider, LPA for additional information about your legal rights by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.