HealthStream Inc. Reports Cybersecurity Incident

HealthStream, Inc. has reported a cybersecurity incident where an unauthorized third party accessed a limited portion of files on the company's corporate file server. The company has launched an investigation, engaged cybersecurity specialists, and notified law enforcement. Based on current findings, customer-facing systems and protected health information (PHI) were not accessed or compromised, and no business operations were interrupted. The incident involved the potential access and exfiltration of employee information, billing-related customer and vendor data, and corporate/legal information. Approximately 75 credentialing customers have been notified as their data was copied to the corporate servers for specific purposes. The company has incurred expenses related to the incident and expects to continue incurring them. HealthStream does not anticipate a material adverse impact on its business, operations, or financial results, although the investigation is ongoing. The company has also included a cautionary note regarding forward-looking statements related to the incident's potential impact.