Ellis Medicine

Ellis Medicine notified consumers that an unauthorized person accessed an employee email account between January 17, 2025, and January 24, 2025, and again between March 27, 2025, and April 5, 2025. The incident potentially exposed names and other personal/health information. Ellis Medicine reset passwords and MFA, engaged third-party investigators, and is offering 12 months of credit monitoring.

Ellis Medicine reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-22. 43 Massachusetts residents were affected.

Ellis Medicine, a healthcare provider, notified 13,383 individuals (including 8 Maine residents) of a phishing incident involving unauthorized access to an employee email account. The breach occurred between January 17, 2025, and April 5, 2025, and was discovered on May 14, 2025. Ellis Medicine reset passwords, enabled MFA, engaged third-party investigators, and provided 12 months of credit monitoring services to affected individuals.

Ellis Medicine notified affected individuals in Nebraska and other states that an employee email account was accessed by an unauthorized person between January 17, 2025, and April 5, 2025. The incident involved suspicious activity on an employee email account, likely via phishing. Ellis Medicine reset passwords, reset MFA, engaged third-party investigators, and offered 12 months of credit monitoring services. The specific data elements at risk were placeholders in the template, but generally included names and potentially government IDs.

Ellis Medicine reported a data breach to the Indiana Attorney General. The breach occurred on 2025-01-17 and was reported on 2025-07-17. 6 Indiana residents were affected. 13,383 individuals affected in total.