Healthcare services firm Episource has been targeted in a cyberattack that resulted in a data breach impacting more than 5.4 million individuals.
Episource provides medical coding and risk adjustment services to doctors, health plans, and other types of healthcare organizations.
The firm revealed in a data breach notice that it detected unauthorized access to its systems in early February. An investigation showed that “a cybercriminal” was able to view and copy data belonging to some Episource customers between January 27 and February 6, 2025.
“We quickly took steps to stop the activity. We began investigating right away and hired a special team to help us. We also called law enforcement. We turned off our computer systems to help protect the customers we work with and their patients and members,” the company said, noting that it’s not aware of any misuse of the compromised data.
The information stolen by the hackers varies from person to person, but it can include name, address, email address, phone number, date of birth, Social Security number, health insurance data, and medical records and other health information.
Episource told the US Department of Health and Human Services (HHS) that the incident impacts roughly 5.41 million individuals. The company has notified impacted customers and is sending notices to the impacted individuals on these customers’ behalf.
Some Episource customers, such as Sharp HealthCare, have published their own data breach notice. Sharp told HHS that more than 20,000 of its customers are affected.
According to some reports, Episource has been targeted in a ransomware attack. However, no known ransomware group appears to have taken credit for the attack on Episource at the time of writing.
It’s not uncommon for healthcare data breaches to impact millions and even tens of millions of individuals.
Related: Asheville Eye Associates Says 147,000 Impacted by Data Breach
Related: 240,000 Impacted by Data Breach at Eyecare Tech Firm Ocuco
Related: Ransomware Gang Leaks Alleged Kettering Health Data
Related: Marlboro-Chesterfield Pathology Data Breach Impacts 235,000 People
