Esse Health’s Cyber Snafu: 263,000 Patients Caught in Data Breach Debacle
Esse Health, the St. Louis medical group, is notifying 263,000 patients of an April cyberattack. While no social security numbers were compromised, personal and health details were swiped. Patients are advised to monitor their credit reports. Meanwhile, Esse Health’s phone systems have resumed operations, so patients can now call to complain about hold music.
Hot Take:
Looks like cybercriminals are taking their “patient” game to a whole new level by making patients out of patient data. Esse Health’s systems got a taste of ransomware’s bedside manner, and let’s just say, it wasn’t pretty. With over 263,000 patients potentially playing “Guess the Identity Thief,” this is one doctor’s appointment you don’t want to miss!
Key Points:
- Esse Health, the largest independent physicians’ group in Greater St. Louis, suffered a cyberattack affecting over 263,000 patients.
- Patient-facing systems and phone lines were down from April 21 and restored by June 2.
- Sensitive data including personal and health information was accessed, though social security numbers were reportedly spared.
- Free identity protection services are offered to affected individuals if they enroll by September 25, 2025.
- Ransomware is suspected, but no group has claimed responsibility.
Already a member? Log in here