Esse Health

Esse Health reported a cyber event where a cybercriminal gained access to its network on April 21, 2025, viewing and copying files containing patient information. The organization engaged forensic specialists, secured systems, notified law enforcement, and offered identity protection services. NextGen electronic medical records were not accessed.

Esse Health notified consumers that a cybercriminal gained access to its network on April 21, 2025, viewing and copying files containing names, addresses, dates of birth, health insurance info, medical record numbers, and certain health information. SSNs were not involved. The company engaged forensic specialists, secured systems, notified law enforcement, and offered free identity protection services.

Esse Health, a healthcare provider, disclosed a cybersecurity incident on April 21, 2025, where a cybercriminal gained unauthorized access to its network and copied files. The breach affected 263,601 individuals nationwide, including 18 in Maine. Compromised data included names, addresses, dates of birth, health insurance info, medical record numbers, and certain health information. Notices were sent on June 25 and 30, 2025, offering 12 months of identity protection services.

Esse Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-27. 92 Massachusetts residents were affected.

Esse Health reported a data breach to the Indiana Attorney General. The breach occurred on 2025-04-21 and was reported on 2025-06-25. 454 Indiana residents were affected. 521,167 individuals affected in total.

Esse Health, a healthcare provider in Missouri, reported to HHS OCR on 2025-06-20 a Hacking/IT Incident affecting 23,671 individuals. Breached information was located on a Network Server. No business associate was present. No further detail is available in the public disclosure.