HealthStream probes cyber incident after unauthorized access to corporate file server

• HealthStream launched an investigation into a cybersecurity incident involving unauthorized access to a limited portion of files on its corporate file server.
• Response protocols were activated. Cybersecurity and forensics specialists were engaged. Law enforcement authorities were notified.
• No evidence so far of access to customer-facing systems. No signs of HIPAA-protected health information exfiltration.
• Investigation indicates employee information, certain customer and vendor billing data, and corporate legal information were accessed or exfiltrated.
• About 75 credentialing customers were notified. Management does not expect a material adverse impact on results.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. HealthStream Inc. published the original content used to generate this news brief via EDGAR, the Electronic Data Gathering, Analysis, and Retrieval system operated by the U.S. Securities and Exchange Commission (Ref. ID: 0001437749-26-024890), on July 29, 2026, and is solely responsible for the information contained therein.