HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICHEALTH_BASICLowContained
Esse Health
bd_ef0beb164e384a0f · schema v1 · pii pii-v1
Full breach record for Esse Health →Esse Health notified Vermont AG of a cyber event starting April 21, 2025, where a cybercriminal accessed the network and copied files containing patient PII and health information. The company engaged forensic specialists, notified law enforcement, and is offering IDX identity protection services. The EMR system was not accessed. Notification sent September 2, 2025.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-10-esse-health-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2025
- Raw hash
- 243ace89fc7f5e2b71f7bb794e55e6b1f2cefbe3c891f9c719e10baf1c81cc89
Reporting entity
- Name
- Esse Healthnorm: esse health
Victim entity
- Name
- Esse Healthnorm: esse health
Incident
- Discovered
- Apr 21, 2025
- Materiality determined
- —
- Notification sent
- Sep 2, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(142 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.