Healthcare data breach impacts over five million Americans

Personal and health information was taken.
 By 
Anna Iovine
 on 
hands on a keyboard at a desktop computer
Credit: Westend61 / Getty Images

American medical coding and risk assessment firm Episource confirmed in a notice that it was affected by a data breach earlier this year.

On February 6, Episource discovered unusual activity on its computers, it reported in the notice. It began investigating, involving a special team and law enforcement, and learned that a cybercriminal viewed and took copies of data between January 27 and February 6.

According to the U.S. Department of Health and Human Services (HHS) Office for Civil Rights, this data breach has impacted around 5.4 million people. Episource submitted the breach to HHS on June 6.


You May Also Like

While the data seen and taken may not have been the same for everyone, the information involved in the breach was:

  • Contact information: Names, addresses, phone numbers, and emails

  • Other personal information: Social Security numbers or dates of birth

  • Health insurance data: Health plans/policies, insurance companies, member/group ID numbers, and Medicaid/Medicare/government payer ID numbers

  • Health data: medical record numbers, doctors, diagnoses, medicines, test results, images, care, and treatment

The notice states that financial, banking, and credit card information "largely were not impacted." Episource began notifying impacted customers of the individuals and data impacted on April 23. It warns that individuals should monitor their explanations of benefits received from their health care plans and their banking statements.

If individuals notice suspicious activity on their bank or credit card statements, or receive notices for health services they haven't received, they should report it to the relevant authority (such as their credit card company or doctor). If individuals believe they're victims of a crime, they should contact law enforcement, the notice states. Basically, watch out for healthcare scams.

Earlier this year, another massive healthcare data breach (this time at medical non-profit, Laboratory Services Cooperative) compromised the data of over a million people.

Healthcare scams, like romance scams and other internet scams, are unfortunately common. The Federal Trade Commission published tips on spotting healthcare scams, such as warning signs and what to do before signing up for a health insurance plan.

anna iovine, a white woman with curly chin-length brown hair, smiles at the camera
Anna Iovine
Associate Editor, Features

Anna Iovine is the associate editor of features at Mashable. Previously, as the sex and relationships reporter, she covered topics ranging from dating apps to pelvic pain. Before Mashable, Anna was a social editor at VICE and freelanced for publications such as Slate and the Columbia Journalism Review. Follow her on Bluesky.

Mashable Potato

Recommended For You
Panera Bread breach: ShinyHunters claims hack of 14 million customers' data
Panera Bread logo on storefront


Instagram denies data breach: So what's up with those sketchy change password emails?
instagram logo against a black background



Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.

Google launches Gemma 4, a new open-source model: How to try it
Google Gemma

The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!