HealthStream Reports Cybersecurity Incident; No Material Impact Expected

Key Highlights

• HealthStream detected a cybersecurity incident involving unauthorized access to a limited portion of its corporate file server.
• Investigation is ongoing, with engagement of cybersecurity specialists and notification to law enforcement.
• No customer-facing systems or protected health information (HIPAA) are believed to have been accessed or compromised.
• Employee information, billing data for certain customers/vendors, and corporate/legal information were accessed.
• Data for approximately 75 credentialing customers, copied for data conversion, was also accessed.
• No interruption to product/service delivery or business operations has occurred.
• Company does not expect a material adverse impact on its business, operations, or financial results.