Law firm Schubert Jonckheer & Kolbe LLP has launched an investigation into the security failure, which affected patients across multiple U.S. regions, including Atlanta, Charlotte, Denver, Houston, Phoenix, Tucson, and Seattle. While One Medical confirmed unauthorized access to the storage platform on June 13, the company has yet to disclose the full scale of the exposure or the specific number of individuals impacted.

ShinyHunters, the group asserting responsibility for the theft, has threatened to release the stolen records publicly. This incident exposes affected seniors and former Iora Health patients to potential identity theft and severe privacy violations. Legal representatives are now evaluating whether impacted individuals are entitled to damages or if court-ordered improvements to the provider's cybersecurity infrastructure are necessary.