EpiSource

EpiSource, a medical coding vendor, experienced unauthorized access to its AWS environment between February 19-21, 2023. The incident was discovered on February 20, 2023. Affected data may include names, dates of birth, addresses, phone numbers, medical record numbers, health plan IDs, provider information, and clinical data such as diagnoses and medications. Social Security numbers and financial account information were not involved. EpiSource contained the incident, engaged a security firm, and enhanced security controls. Identity theft protection was offered to affected individuals.