Blueberry Pediatrics notifies patients after Metabase vulnerability exposed children's health data

What the notice says

Blueberry Pediatrics, referred to in the notice as Blueberry Medical, notified parents and guardians of patients that a security incident affected limited elements of children's protected health information. The notice as filed states that , a third-party business intelligence tool. Blueberry Pediatrics also disclosed that a separate vendor was involved, noting . Blueberry Pediatrics was notified of the Photon-side incident on August 24, 2026.

The information that may have been exposed includes . For the Photon portion, the notice specifies . The notice confirms . Regarding the Photon timeline, Blueberry Pediatrics states patient data was obtained .

What the notice leaves open

The notice as filed does not state a total number of individuals affected, nor does it name the criminal actors involved. It also does not specify whether any exposed data has been used or further disseminated.