ESO Solutions, Inc.
ent_dcd9987f1c3804d244059a7c
Disclosures
16
State AG · HHS OCR · 12 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
2,700,000
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- ESO Solutions, Inc.
- Normalized
- eso solutions— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (16)newest first
- New Hampshire State AGas victim2024-04-15
ESO Solutions, Inc. notified the New Hampshire Attorney General of a ransomware incident detected on September 28, 2023. The attack encrypted systems and compromised PHI and PII of approximately 520 New Hampshire residents. ESO engaged forensic investigators, restored systems from backups, and notified the FBI and HHS OCR. Notifications to individuals began December 12, 2023.
- South Carolina State AGas victim2024-04-09
ESO Solutions, Inc. issued a supplemental notice to South Carolina regarding a data security incident impacting approximately 7,965 SC residents. The incident involved unauthorized access to patient personal and medical information. Notifications were issued on a rolling basis through March 1, 2024.
- Maine State AGas victim2024-04-09
ESO Solutions Inc. reported a data breach that affected approximately 2.7 million individuals, including 499 residents of Maine. The breach was an external system hacking incident that occurred and was discovered on September 28, 2023. The compromised information includes names and Social Security Numbers. ESO Solutions began notifying affected individuals by mail on March 1, 2024, and is offering 12 months of credit monitoring services through Kroll.
- New Hampshire State AGas victim2023-12-26
ESO Solutions, Inc. notified the New Hampshire Attorney General of a ransomware incident detected on September 28, 2023. The attack encrypted systems and exposed PHI and personal data of approximately 154 NH residents. ESO engaged forensic investigators, restored systems from backups, and notified the FBI, HHS OCR, and state AGs. Affected individuals were offered 12 months of Kroll identity monitoring.
- Washington State AGas victim2023-12-20
ESO Solutions, Inc. reported a ransomware incident affecting Washington residents. Unauthorized access occurred Sept 17-28, 2023. Data included PHI, names, SSNs, and DOBs. 1,488 WA residents affected. ESO engaged forensic investigators, notified the FBI, and offered credit monitoring.
- California State AGas victim2023-12-20
ESO Solutions, Inc. experienced a ransomware incident detected on September 28, 2023, with unauthorized access occurring between September 17 and September 28, 2023. An unauthorized third party accessed and encrypted systems, potentially acquiring protected health information (PHI), including names, SSNs, and medical records. ESO engaged forensic specialists, notified the FBI, and offered identity monitoring services to affected individuals.
- South Carolina State AGas victim2023-12-20
ESO Solutions Inc. notified South Carolina residents of a cybersecurity incident involving unauthorized access to protected health information and personal data. The breach involved the use of stolen credentials. Affected individuals were offered 24 months of complimentary identity monitoring through Kroll.
- Massachusetts State AGas victim2023-12-20
ESO Solutions, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-20. 906 Massachusetts residents were affected. The report records the breach type as electronic.
- Oregon State AGas victim2023-12-20
ESO Solutions, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-12-20. The breach occurred during 9/17/2023. The breach was discovered on 9/28/2023. 2,700,000 individuals were affected. Notice was sent on 12/12/2023.
- California State AGas victim2023-12-19
ESO Solutions, Inc. experienced a ransomware incident on September 17, 2023, detected on September 28, 2023. An unauthorized third party accessed and encrypted systems, potentially acquiring protected health information (PHI), including SSNs, medical records, and insurance data for patients and minors. ESO engaged forensic experts, notified the FBI, and offered identity monitoring.
- Maine State AGas victim2023-12-19
ESO Solutions, Inc. reported an external system breach (hacking) occurring on September 17, 2023, discovered on September 28, 2023. The incident affected approximately 2,700,000 individuals nationwide, including 132 Maine residents. Personal information acquired included names and Social Security Numbers. The company provided written notification on December 12, 2023, and offered 12 months of identity theft protection services.
- Montana State AGas victim2023-12-19
ESO Solutions, Inc. disclosed a ransomware incident detected on September 28, 2023, where an unauthorized third party accessed and encrypted systems. The breach potentially exposed patient and personal information, including names, SSNs, addresses, and PHI (diagnoses, medical record numbers). ESO engaged forensic investigators, notified the FBI, and offered 12 months of identity monitoring.
- TEXASHHS OCRas victim2023-12-18
ESO Solutions, Inc., a Texas-based business associate, reported a ransomware attack to HHS OCR on 2023-12-18 that compromised PHI of 2,700,000 individuals stored on a network server. PHI included names, addresses, phone numbers, dates of birth, Social Security numbers, diagnoses/conditions, medications, and other treatment information. Covered entities took corrective actions including additional administrative and technical safeguards.
- Delaware State AGas victim2023-12-12
ESO Solutions, Inc. disclosed a ransomware incident detected on September 28, 2023, where an unauthorized third party accessed and encrypted systems. The incident potentially exposed personal information (SSN, name, address) and protected health information (diagnoses, treatment info) of patients of healthcare organizations served by ESO. ESO engaged forensic specialists, notified the FBI, restored systems from backups, and offered 12 months of identity monitoring.
- Vermont State AGas victim2023-12-12
ESO Solutions, Inc. notified consumers of a ransomware incident detected on September 28, 2023. Unauthorized access encrypted systems, potentially exposing PHI, SSNs, and medical data. ESO engaged forensic investigators, notified the FBI, restored systems from backups, and offered 12 months of identity monitoring. No evidence of misuse found.
- Illinois State AGas victim2023-01-01
ESO SOLUTIONS, INC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-846). The register records the breach as discovered on September 28, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.