EHR & Health Data Systems · EHR Vendor (Enterprise/Hospital) · Regulatory action + Private litigation + Data breach
Veradigm (formerly Allscripts; incl. Practice Fusion)
Headline
Veradigm, the company formerly called Allscripts, owns the Practice Fusion records system, which in January 2020 agreed to pay $145 million to resolve federal criminal and civil investigations…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Veradigm, the company formerly called Allscripts, owns the Practice Fusion records system, which in January 2020 agreed to pay $145 million to resolve federal criminal and civil investigations: DOJ said Practice Fusion took about $1 million from an opioid maker to design pop-up alerts in doctors' software meant to increase prescriptions of extended-release opioids, and also misrepresented its software to get government certification. Veradigm now says several state attorneys general are investigating the same conduct and that private suits have been filed. The company also suffered a breach: someone who had hacked one of its customers around December 2024 used stolen credentials to pull patient data from a Veradigm 'migration storage account'; Veradigm settled the resulting class action for $10.5 million (final approval March 26, 2026) and reported the incident to HHS's Office for Civil Rights and state AGs. Veradigm also sells access to what it calls 'over 150 million' de-identified patient records to drug and life-sciences companies. Its stock was suspended from Nasdaq on February 29, 2024 and delisted after it fell behind on SEC filings and had to restate past financial statements; it now trades over the counter.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-15
Primary source. www.justice.gov/opa/pr/electronic-health-records-vendor-pay-145-million-resolve-criminal-and-civil-investigations-0 — Unverified - heuristic first draft.
Terms
Arbitration
No direct patient agreement for the EHR; website terms of use contain no arbitration clause found this pass. FollowMyHealth patient-portal terms not verified this pass.
Data sharing
Sells/licenses de-identified EHR data: Veradigm's real-world-data page offers life-sciences buyers 'access to over 150 million patient records' from the Veradigm Network, described as de-identified and statistically certified; the 10-K describes a 'large ambulatory EHR database' plus NLP-enriched clinical notes and cardiovascular/metabolic registries. Privacy notice allows de-identified data to be used 'for any lawful purpose' and shares website data with advertising partners. Practice Fusion's pharma-sponsored clinical decision support alerts (incl. one sponsored by Purdue Pharma, launched 2016) are the core of the DOJ case.
Fees and billing
No consumer fees; vendor paid by practices. Investor issues: Nasdaq suspension Feb 29, 2024 and Form 25 delisting filed April 25, 2024; trades OTC as MDRX; restatement; securities class action still pending (motion to dismiss largely denied Aug 18, 2026).
Contacts
Privacy contact. Privacy@veradigm.com; Veradigm, Attn: Privacy Officer, 222 Merchandise Mart Plaza, Suite 2024, Chicago, Illinois 60654
Legal notice. Veradigm Inc., 222 Merchandise Mart Plaza, Suite 2024, Chicago, IL 60654 (business address per SEC filings)
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| DOJ press release · 2020-01-27 www.justice.gov/opa/pr/electronic-health-records-vendor-pay-145-million-resolve-criminal-and-civil-investigations-0 | whole row | Unassigned | confirmed | “It is critically important that technology companies do not cheat when certifying that software.” Quote basis: not recorded. |
| SEC Form 10-K (FY2024) · 2026-05-26 www.sec.gov/Archives/edgar/data/1124804/000119312526239413/mdrx-20241231.htm | whole row | Unassigned | confirmed | “was able to use credentials taken in that attack to obtain data from a migration storage account used by Veradigm” Quote basis: not recorded. |
| Company press release · 2026-05-26 investor.veradigm.com/news-releases/news-release-details/veradigm-files-2023-and-2024-form-10-k | whole row | Unassigned | confirmed | “getting current and staying current with its SEC filing obligations” Quote basis: not recorded. |
| Company website · 2026-10-14 veradigm.com/real-world-data-solutions/ | whole row | Unassigned | confirmed | “provides streamlined access to over 150 million patient records” Quote basis: not recorded. |
| Company privacy notice · Last updat veradigm.com/legal/privacy-notice/ | whole row | Unassigned | confirmed | “Any protected health information ("PHI") that we collect or maintain is subject to HIPAA and not this Privacy Notice.” Quote basis: not recorded. |
| Company website · 2026-10-14 veradigm.com/ | whole row | Unassigned | confirmed | “Headquartered in Chicago, IL” Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://veradigm.com/legal/privacy-notice/ | Not fetched yet | NOT CONFIRMED |
| Terms of service https://veradigm.com/legal/terms-of-use/ | Not fetched yet | NOT CONFIRMED |
| Website https://veradigm.com/ | Not fetched yet | — |
| Primary source https://www.justice.gov/opa/pr/electronic-health-records-vendor-pay-145-million-resolve-criminal-and-civil-investigations-0 Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
| Action | Amount | Link |
|---|---|---|
| United States v. Practice Fusion (first criminal action against an EHR vendor; $145M) U.S. Department of Justice (Criminal and Civil), U.S. Attorney's Office, District of Vermont, U.S. Attorney's Office, Northern District of California, Participating states (Medicaid share), 2020 DOJ Press Release No. 20-94 (Jan. 27, 2020); case number not verified this pass | $145M | proposed |
Links are proposed matches, not yet reviewed.
State statute
No comprehensive state privacy statute on file for IL