HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICPHILowContained
Esse Health
bd_0f559e2e21375925 · schema v1 · pii pii-v1
Full breach record for Esse Health →Esse Health notified Vermont consumers of a cyber event discovered on April 21, 2025, where a cybercriminal gained unauthorized access to the network and copied files containing PHI, names, addresses, DOBs, and health insurance info. No SSNs were involved. Esse Health engaged forensic specialists, notified law enforcement, and offered IDX identity protection services.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_de426a2ba50bebf9Maine State AGfiled 2025-06-30Verified
- bd_8579359a35c78237Indiana State AGfiled 2025-06-25(5d gap)Verified
- bd_f1219c8e28ac0ec0HHS OCRfiled 2025-06-20(10d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-30-esse-health-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- c4936b2d269fe50a97efae64c5ae314c9c5d589028aa52938ce69103371934db
Reporting entity
- Name
- Esse Healthnorm: esse health
Victim entity
- Name
- Esse Healthnorm: esse health
Incident
- Discovered
- Apr 21, 2025
- Materiality determined
- —
- Notification sent
- Jun 30, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.