F500 Telecom & Consumer Svc · Health Care: Medical Facilities · Data breach
Universal Health Services
Headline
UHS is the parent of Talkspace, whose findings are documented in the Retirement & Telehealth tab and are among the most serious in this tracker.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
UHS is the parent of Talkspace, whose findings are documented in the Retirement & Telehealth tab and are among the most serious in this tracker. UHS separately operates a large network of inpatient behavioural health facilities and experienced a September 2020 cyberattack (widely reported as ransomware; UHS called it an 'IT security issue') that took its network offline across US facilities, forcing clinical staff to paper records - a patient-safety event rather than only a data one. Behavioural health records are the most sensitive category in healthcare and UHS holds them at scale.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual patient agreements.
Data sharing
Universal Health Services (UHS) is the PARENT COMPANY of Talkspace, already extensively documented in the Retirement & Telehealth tab of this tracker (following Talkspace's 2026 acquisition by UHS for $835 million) — including a reported (not re-verified) statement in which a Talkspace executive described the company's 8 billion words of therapy-session data as 'one of the largest mental health data banks in the world.' UHS itself operates 346 inpatient behavioral health facilities plus 168 outpatient facilities and ambulatory care access points (per UHS's investor site, Oct 2026); no additional UHS-corporate-level breach or lawsuit independently confirmed this pass beyond the Talkspace acquisition context.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy uhsinc.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service uhsinc.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.