Medsurant Holdings, LLC, a healthcare services provider, disclosed a breach affecting patient and employee data. An unknown actor gained access via a suspicious email on September 30, 2021, after initial access between September 23-30, 2021. Data exfiltrated included names, addresses, and government IDs. A second access occurred on November 12, 2021, involving limited encryption. Medsurant notified law enforcement and HHS, offering credit monitoring.