5.4 million patient records exposed in healthcare data breach
By Kurt Knutsson, CyberGuy Report
Published June 28, 2025
Over the past decade, software companies have built solutions for nearly every industry, including healthcare. One term you might be familiar with is software as a service (SaaS), a model by which software is accessed online through a subscription rather than installed on individual machines.
In healthcare, SaaS providers are now a common part of the ecosystem. But, recently, many of them have made headlines for the wrong reasons.
Several data breaches have been traced back to vulnerabilities at these third-party service providers. The latest incident comes from one such firm, which has now confirmed that hackers stole the health information of over 5 million people in the United States during a cyberattack in January.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide — free when you join.
ASCENSION HEALTHCARE DATA BREACH EXPOSES 430,000 PATIENT RECORDS
SaaS firm leads to major healthcare blunder
Episource, a big name in healthcare data analytics and coding services, has confirmed a major cybersecurity incident (via Bleeping Computer ). The breach involved sensitive health information belonging to over 5 million people in the United States. The company first noticed suspicious system activity Feb. 6, 2025, but the actual compromise began ten days earlier.
An internal investigation revealed that hackers accessed and copied private data between Jan. 27 and Feb. 6. The company insists that no financial information was taken, but the stolen records do include names, contact details, Social Security numbers, Medicaid IDs and full medical histories.
Episource claims there's no evidence the information has been misused, but because they haven't seen the fallout yet doesn't mean it isn't happening. Once data like this is out, it spreads fast, and the consequences don't wait for official confirmation.
OVER 8 MILLION PATIENT RECORDS LEAKED IN HEALTHCARE DATA BREACH Why healthcare SaaS is a growing target
The healthcare industry has embraced cloud-based services to improve efficiency, scale operations and reduce overhead. Companies like Episource enable healthcare payers to manage coding and risk adjustment at a much larger scale. But this shift has also introduced new risks. When third-party vendors handle patient data, the security of that data becomes dependent on their infrastructure.
Healthcare data is among the most valuable types of personal information for hackers. Unlike payment card data, which can be changed quickly, medical and identity records are long-term assets on the dark web. These breaches can lead to insurance fraud, identity theft and even blackmail.
Episource is not alone in facing this kind of attack. In the past few years, several healthcare SaaS providers have faced breaches, including Accellion and Blackbaud. These incidents have affected millions of patients and have led to class-action lawsuits and stricter government scrutiny.
WHAT IS ARTIFICIAL INTELLIGENCE (AI)?
5.5 MILLION PATIENTS EXPOSED BY MAJOR HEALTHCARE DATA BREACH 5 ways you can protect yourself from healthcare data breach
If your information was part of the healthcare breach or any similar one, it's worth taking a few steps to protect yourself.
1. Consider identity theft protection services: Since the healthcare data breach exposed personal and financial information, it's crucial to stay proactive against identity theft. Identity theft protection services offer continuous monitoring of your credit reports, Social Security number and even the dark web to detect if your information is being misused.
These services send you real-time alerts about suspicious activity, such as new credit inquiries or attempts to open accounts in your name, helping you act quickly before serious damage occurs. Beyond monitoring, many identity theft protection companies provide dedicated recovery specialists who assist you in resolving fraud issues, disputing unauthorized charges and restoring your identity if it's compromised. See my tips and best picks on how to protect yourself from identity theft.
2. Use personal data removal services: The healthcare data breach leaks loads of information about you, and all this could end up in the public domain, which essentially gives anyone an opportunity to scam you.
One proactive step is to consider personal data removal services, which specialize in continuously monitoring and removing your information from various online databases and websites. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.
Get a free scan to find out if your personal information is already out on the web.
3. Have strong antivirus software: Hackers have people's email addresses and full names, which makes it easy for them to send you a phishing link that installs malware and steals all your data. These messages are socially engineered to catch them, and catching them is nearly impossible if you're not careful. However, you're not without defenses.
The best way to safeguard yourself from malicious links is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices .
4. Enable two-factor authentication: While passwords weren't part of the data breach, you still need to enable two-factor authentication (2FA). It gives you an extra layer of security on all your important accounts, including email, banking and social media. 2FA requires you to provide a second piece of information, such as a code sent to your phone, in addition to your password when logging in. This makes it significantly harder for hackers to access your accounts, even if they have your password. Enabling 2FA can greatly reduce the risk of unauthorized access and protect your sensitive data.
5. Be wary of mailbox communications: Bad actors may also try to scam you through snail mail. The data leak gives them access to your address. They may impersonate people or brands you know and use themes that require urgent attention, such as missed deliveries, account suspensions and security alerts.
WINDOWS 10 SECURITY FLAWS LEAVE MILLIONS VULNERABLE Kurt's key takeaways
What makes this breach especially alarming is that many of the affected patients may have never even heard of Episource. As a business-to-business vendor, Episource operates in the background, working with insurers and healthcare providers, not with patients directly. The people affected were customers of those companies, yet it's their most sensitive data now at risk because of a third party they never chose or trusted. This kind of indirect relationship muddies the waters when it comes to responsibility and makes it even harder to demand transparency or hold anyone accountable.
CLICK HERE TO GET THE FOX NEWS APP
Do you think healthcare companies are investing enough in their cybersecurity infrastructure? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you'd like us to cover
Follow Kurt on his social channels
Answers to the most asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
Print Close
URL
https://www.foxnews.com/tech/5-4-million-patient-records-exposed-healthcare-data-breach
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
44 minutes ago
- Yahoo
New AI tool is better than doctors at diagnosing complicated medical issues, Microsoft says
Microsoft said it is one step closer to 'medical superintelligence' after a new artificial intelligence (AI) tool beat doctors at diagnosing complex medical problems. Tech giants are racing to develop superintelligence, which refers to an AI system that exceeds human intellectual abilities in every way – and they're promising to use it to upend healthcare systems around the world. For the latest experiment, Microsoft tested an AI diagnostic system against 21 experienced physicians, using real-world case studies from 304 patients that were published in the New England Journal of Medicine, a leading medical journal. The AI tool correctly diagnosed up to 85.5 per cent of cases – roughly four times more than the group of doctors from the United Kingdom and the United States, who had between five and 20 years of experience. Related As AI reshapes patient care, human nurses are pushing back against its creeping influence The model was also cheaper than human doctors, ordering fewer scans and tests to reach the correct diagnosis, the analysis found. Microsoft said the findings indicate that AI models can reason through complex diagnostic problems that stump physicians, who specialise in their fields but are not experts in every aspect of medicine. However, AI 'can blend both breadth and depth of expertise, demonstrating clinical reasoning capabilities that, across many aspects of clinical reasoning, exceed those of any individual physician,' Microsoft executives said in a press release. 'This kind of reasoning has the potential to reshape healthcare'. Microsoft does not see AI replacing doctors anytime soon, saying the tools will instead help physicians automate some routine tasks, personalise patients' treatment, and speed up diagnoses. Microsoft's AI system made diagnoses by mimicking a doctor's process of collecting a patient's details, ordering tests, and eventually narrowing down a medical diagnosis. A 'gatekeeper agent' had information from the patient case studies. It interacted with a 'diagnostic orchestrator' that asked questions and ordered tests, receiving results from the real-world workups. Related Is AI going to steal your job? Probably not, new study finds The company tested the system with leading AI models, including GPT, Llama, Claude, Gemini, Grok, and DeepSeek. OpenAI's o3 model, which is integrated into ChatGPT, correctly solved 85.5 per cent of the patient cases, compared to an average of 20 per cent among the group of 21 experienced doctors. The researchers published their findings online as a preprint article, meaning it has not yet been peer-reviewed. Microsoft also acknowledged some key limitations, notably that the AI tool has only been tested for complicated health problems, not more common, everyday issues. Related AI to shape EU health policymaking without new rules The panel of doctors also worked without access to their colleagues, textbooks, or other tools that they might typically use when making diagnoses. 'This was done to enable a fair comparison to raw human performance,' Microsoft said. The company called for more real-world evidence on AI's potential in health clinics, and said it will 'rigorously test and validate these approaches' before making them more widely available.
Yahoo
an hour ago
- Yahoo
Experts make surprising discovery about health impacts of drinking Diet Coke: 'Increases the risk'
New studies reveal the health risks of drinking Diet Coke on a regular basis. According to Fox 5 DC, researchers have linked the soda to health complications, including metabolic and cardiovascular risks. Coca-Cola's marketing campaigns suggest Diet Coke is a healthier alternative to Coke. While its sugar content is lower, artificial sweeteners make the drink much worse for your health, experts warn. Diet Coke contains aspartame, an artificial sweetener that can cause adverse health effects when consumed on a regular basis. Fox 5 reported that research shows artificial sweeteners such as aspartame not only disrupt the balance of gut bacteria but also lead to increased risks of Type 2 diabetes, weight gain, and heart disease. "Another study showed that just one diet soda increases the risk of [atrial fibrillation], an irregular heartbeat that increases the risk of vascular events like stroke," Michelle Routhenstein, a New York-based registered dietitian who specializes in heart disease, said. "Many of my clients who have ditched Diet Coke mention how they never realized how addictive it can be." While the Food and Drug Administration says aspartame is safe for consumption, Routhenstein told Fox 5 that it "has been labeled as possibly carcinogenic by the World Health Organization and may negatively affect our gut microbiome." The new research offers more evidence that reinforces the health risks of consuming artificial sweeteners on a consistent basis. Along with the health concerns, these additives also negatively impact the environment. Researchers have identified artificial sweeteners as an "emerging source of pollution" since they are "resistant to wastewater treatment processes and are therefore continuously introduced into the water environments." Though Coca-Cola has tried to mitigate its environmental footprint through sustainable packaging initiatives, it is still the world's leading producer of branded plastic waste. The International Agency for Research on Cancer concluded in 2023 that aspartame could be a human carcinogen. While more research needs to be done, organizations are acknowledging the health risks associated with aspartame consumption. The best way to reduce these risks is to swap out Diet Coke for a healthier option. Routhenstein encourages people to try low-sugar kombucha, which is a good source of probiotics and thus has gut benefits. Other ways to get your sweet fix without harmful ingredients are to add lime or lemon juice to sparkling water. When you're choosing health and beauty products, which of these factors is most important to you? Cost Brand name Ingredients Packaging Click your choice to see results and speak your mind. Join our free newsletter for weekly updates on the latest innovations improving our lives and shaping our future, and don't miss this cool list of easy ways to help yourself while helping the planet.
CBS News
an hour ago
- CBS News
Dog and cat intake on the rise as Denver Animal Shelter extends weekend hours to increase adoptions
In the last six months, the Denver Animal Shelter has taken in more than 4,600 animals - a 4% increase from this time last year, according to the Denver Animal Shelter. Ten-year-old Bella knows her health comes first. For Belen Tzintzún Chávez, getting her dog vaccinated is a top priority -- especially when it's affordable. "In this economy, it's been difficult to keep up, but I still make it a priority," she said. "I value my dog a lot, and I just want to make sure she's always protected." To support pet owners like Chávez, the Denver Animal Shelter is making a significant shift. Its low-cost vaccine clinics will now take place on Tuesdays and Thursdays, freeing up four extra hours every weekend strictly for adoptions. "We're seeing a big number of surrenders. A lot of it has to do with socioeconomic needs," said shelter director Melanie Sobel. With the rising costs of living and pet care, shelters are having to adapt. This year, the shelter has also reported a rise in the number of emaciated dogs brought in, many showing signs of severe neglect. "In the last few months, we've seen more emaciated animals come in -- dogs particularly," Sobel said. "This could be due to a medical condition or simply a lack of nourishment." In 2024, the Denver Animal Shelter took in nearly 10,000 animals -- a 45% increase from pre-pandemic numbers. Staff say the newly adjusted hours are critical to keep up with the growing demand. "We want to do as many adoptions as possible," Sobel said. From 9-11 a.m. on Saturdays and Sundays, DAS will focus only on pet adoptions, providing four additional hours of adoption time each weekend. All other services, including surrendering pets, picking up lost animals, owner euthanasia requests, permitting, licensing, and more, will operate from 11 a.m.- 4:30 p.m. on Saturdays and Sundays. For more information about you can visit their website Adoptable Pets. You can also view our lost and found animals, who may soon become available for adoption. In July, dogs over 1 year old and over 50 pounds are $50, while cats over 1 year old are $40. Adoption fees include spay/neuter surgery, vaccines, a microchip, and a one-year pet license.
