HSHHSH Health Technology Supplier Hub
Home › Suppliers › Health Gorilla › Risk

Health Gorilla: risk summary

Summaries are drawn from public sources and link to them. HSH does not give a risk rating: read the summary and sources and reach your own view. Unproven allegations are labelled as such. Suppliers can submit a response, which is shown alongside.

Financial

Latest full-year results from official filings.

Not stock-market listed and no listed parent identified, so no public annual accounts were found.

Financial health not assessed; a credit-agency licence (e.g. Dun & Bradstreet) would be needed.

Researched 8 Nov 2026

Adverse media

Credible news about incidents, disputes, legal action or restructuring in the last 24 months.

Jan 2026: Epic and four US health systems sued Health Gorilla in California federal court, alleging it let other firms obtain patient records via exchange networks and market them to lawyers. Health Gorilla vehemently denies the claims and calls the suit anti-competitive.

Researched 10 Nov 2026

Cyber & information governance

Data breaches, cyber incidents, regulator action and assurance status.

Jan 2026: a lawsuit by Epic and health systems alleges Health Gorilla failed to adequately vet who could access Carequality and TEFCA, letting nearly 300,000 records be obtained for non-treatment purposes; the company denies this. NHS DSPT status not yet checked.

Researched 10 Nov 2026

Regulatory & clinical safety

Recalls, safety notices, regulator action and clinical safety concerns.

Interoperability and data exchange supplier; no regulatory or clinical safety actions found in the last 24 months.

Researched 10 Nov 2026