Healthcare services firm Episource reported a major data breach affecting 5.4 million individuals, making it one of the largest health sector breaches reported to federal regulators in 2025.
The company detected unusual activity in February and confirmed a cybercriminal accessed and stole sensitive data over the winter. Exposed information may include medical records, diagnoses, test results, health insurance details, Social Security numbers, and birth dates.
Episource said there's no evidence of misuse but is working with affected healthcare organizations to notify impacted individuals. Customers like Sharp Healthcare have also reported related breaches.
This breach follows a growing trend of healthcare-targeted cyberattacks, including a recent 190 million-person breach at Change Healthcare and incidents at Yale New Haven Health and Blue Shield of California.
The surge in ransomware and hacking continues to put millions of patients’ personal data at risk.
24-06-2025