Archive — US — techcrunch
Episource is notifying millions of people that their health data was stolen
Episource has notified over 5.4 million individuals that their personal and health data was stolen in a cyberattack earlier this year. The breach, among the largest in healthcare this year, compromised sensitive information, including medical records and health insurance details. The attack was reportedly linked to ransomware and follows a pattern of cybersecurity incidents affecting UnitedHealth Group.
Key points
- Episource, a medical billing company, experienced a cyberattack affecting 5.4 million people.
- The breach involved unauthorized access to personal and protected health data including names, addresses, medications, and health policies.
- The attack occurred over a week, ending February 6, 2023, allowing the perpetrator to copy patient data.
- Sharp Healthcare confirmed that the attack was caused by ransomware.
- This incident is part of a trend of increasing cybersecurity breaches in the healthcare sector, including previous incidents affecting UnitedHealth.
Why it matters
- The cyberattack follows a trend of significant healthcare data breaches, such as Change Healthcare's breach in February 2024.
- Healthcare data breaches are increasingly common due to the rise of ransomware attacks targeting sensitive information.
- Increased regulatory scrutiny over data protection is expected as healthcare organizations face ongoing cybersecurity challenges, aligned with growing IT trends towards digital transformation and data security.
The Episource data breach highlights critical vulnerabilities in healthcare cybersecurity, necessitating enhanced protections and awareness in an industry increasingly targeted by cybercriminals.