Cluster · 2 affected providers
Option Care Health Email Compromise — Home Infusion
February 6-9, 2026 business email compromise at Option Care Health, the largest US independent home and alternate-site infusion provider. Two HHS OCR filings (February 20, 2026 and April 6, 2026) cover the same underlying email-compromise incident. Treatment information from infusion patient records can re-identify specific diagnoses (HIV antiretrovirals, oncology chemotherapy, IVIG, hemophilia factors).
Affected
3,977
Providers
2
Window
February–April 2026
Threat actor
Unattributed
Scope
Patients receiving home infusion therapy from Option Care Health (TPN, IVIG, specialty biologics, antibiotics). ~3,977 individuals across the two filings.