EpiSource

Episource, LLC, a medical coding and risk adjustment services provider, notified the New Hampshire Attorney General of a data security event. Unauthorized access occurred between Jan 27 and Feb 6, 2025, involving PHI, SSNs, and contact info for patients of Episource's healthcare clients. Episource detected the incident on Feb 6, 2025, engaged forensic investigators, and notified law enforcement. Notices were mailed to 4 NH residents on July 11, 2025.

Affected (this filing): 4

Episource, LLC reported a data breach where a criminal accessed and copied data from its computer systems between January 27, 2025, and February 6, 2025. The incident was discovered on February 6, 2025. Affected data includes contact information, health insurance data, health data (diagnoses, treatments), and other personal data such as date of birth. Episource engaged a special investigation team, notified law enforcement, and shut down impacted systems. It is offering two years of credit monitoring and identity theft protection to affected individuals.

Episource, LLC submitted a supplemental notice to the New Hampshire Attorney General regarding a data security event. Unauthorized access occurred between January 27 and February 6, 2025, involving PHI and PII of healthcare plan members. The incident affected at least 5 individuals in NH (Blue Shield of California, MCS Healthcare Holdings, United Healthcare). Episource engaged law enforcement, contained systems, and offered credit monitoring.

Affected (this filing): 5