Photon Health Reports Data Breach Following Metabase Zero-Day Attack

The security failure originated on August 21, 2026, when attackers exploited a previously unknown flaw in Photon’s self-hosted Metabase environment. Following the intrusion, the company engaged external cybersecurity specialists to contain the threat and conduct a forensic review, which concluded on September 4, 2026. While the company stated it has no evidence that the stolen data has been misused, the exposed records included names, addresses, phone numbers, dates of birth, and prescription details.

In response to the vulnerability, Photon has implemented additional technical safeguards to fortify its infrastructure against future exploits. Affected individuals are being offered complimentary identity theft protection and credit monitoring services for a period of twelve to twenty-four months. Those seeking further clarification or assistance regarding their specific information status can reach the company’s dedicated support line at 1-844-772-5746.