Endue Software

Endure Software reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-16 and was reported on 2025-04-11. 165 Indiana residents were affected. 118,028 individuals affected in total.

Endue Software reported to HHS on 2025-04-11 a Hacking/IT Incident affecting 118028 individuals. Breached information located on Network Server. Business Associate present: Yes.

Endue Software, a provider of infusion care management software, notified the NH AG of a cybersecurity event on Feb 17, 2025, following unauthorized access on Feb 16, 2025. Files from internal systems were copied, affecting 67 NH residents with PII including SSNs. Endue notified law enforcement, offered credit monitoring, and is dissolving its business.

Endue Software notified consumers of a cybersecurity incident where an unauthorized actor accessed systems on Feb 16, 2025, copying files containing names, DOBs, SSNs, and medical record numbers. Endue secured systems, engaged law enforcement, and offered credit monitoring. No evidence of identity theft found.

Endue Software reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-04-11. 175 Massachusetts residents were affected.

Endue Software, a healthcare software provider, disclosed a cybersecurity event where an unauthorized actor accessed systems on Feb 16, 2025, copying files containing names, SSNs, DOBs, and medical record numbers. 118,028 individuals affected. Endue notified law enforcement, regulators, and provided 12 months of credit monitoring.

Endue Software, a healthcare infusion care software provider, disclosed a cybersecurity event on February 16, 2025, where an unauthorized actor accessed systems and copied files containing names, SSNs, dates of birth, and medical record numbers. Endue notified 15 Nebraska residents on April 11, 2025, provided 12 months of credit monitoring, and reported to law enforcement and HHS. Endue is dissolving its business.

Endue Software, a healthcare software provider, notified consumers of a cybersecurity incident on Feb 16, 2025, where an unauthorized actor accessed systems and copied files. Affected data included names, DOBs, SSNs, and medical record numbers. Endue engaged law enforcement, enhanced security, and offered credit monitoring. No specific count was provided, though ~32 Rhode Island residents were noted.

Endue Software, a provider of infusion care management software, experienced unauthorized access to certain internal systems on February 16, 2025. The company discovered the incident on February 17, 2025. An unauthorized actor accessed systems for a brief period and copied files containing names, dates of birth, Social Security numbers, and medical record numbers of individuals whose information was provided by Twelfth One, LLC. Endue secured its systems, notified law enforcement and regulators, and is offering credit monitoring and fraud assistance to affected individuals. The incident is contained.

Endue Software notified individuals of a cybersecurity incident on Feb 16, 2025, where an unauthorized actor accessed systems and copied files containing names, DOBs, SSNs, and medical record numbers. Endue secured systems, engaged law enforcement, and offered credit monitoring and fraud assistance.

ENDUE SOFTWARE filed a data-breach notice with the Illinois Attorney General in April 2025 (case 25-04-100). The register records the breach as discovered on February 26, 2025. Personal information types reported: drivers license, medical information, ssn. Additional entities named: TWELFTH ONE, LLC, RHEUMATOLOGY ASSOCIATES OF MAUI, ACCESS INFUSION CARE, INC., WEITZNER YONKER KAINE MD PA DBA. SARASOTA ARTHRITIS CENTER, GRAND JUNCTION GASTROENTEROLOGY, RHEUM ASSOCIATED OF BALTIMORE, LLC, NEXT GENERATION STRATEGIES DBA. NEVADA INFUSION, INFECTIOUS DISEASES CONSULTANTS OF OKLAHOMA CITY, FLEXCARE SPECIALTY SERVICES, LLC, THRIVE HEALTH IV CLINIC, PC. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.