\n<\/p>\n
Medical billing giant Episource is notifying millions of people across the United States that their personal and health information was stolen in a cyberattack earlier this year.<\/p>\n
The breach affects more than 5.4 million people, according to a listing with the U.S. Department of Health and Human Services<\/a>, making it one of the largest healthcare breaches of the year so far.\u00a0<\/p>\n Episource, owned by health insurance giant UnitedHealth Group\u2019s subsidiary Optum, provides billing adjustment to the doctors, hospitals, and other organizations that work in the healthcare industry. As such, the company handles large amounts of patients\u2019 personal and medical data to process claims through their health insurance.<\/p>\n In notices filed in California<\/a> and Vermont<\/a> on Friday, Episource said a criminal was able to \u201csee and take copies\u201d of patient and member data from its systems during the weeklong breach ending February 6.<\/p>\n The stolen information includes personal information, such as names, postal and email addresses, and phone numbers, as well as protected health data, including medical record numbers, and data relating to doctors, diagnoses, medications, test results, imaging, care, and other treatment. The stolen data also contains health insurance information, like health plans, policies, and member numbers.<\/p>\n Episource did not describe the nature of the incident, but Sharp Healthcare, one of the companies that works with Episource and was affected by the cyberattack, told its customers that the Episource hack was caused by ransomware<\/a>.\u00a0<\/p>\n This is the latest cybersecurity incident to hit UnitedHealth in recent years.\u00a0<\/p>\n Change Healthcare, one of the largest companies in the U.S. healthcare industry that processes billions of health transactions each year, was hacked by a ransomware gang in February 2024<\/a>, leading to the theft of more than 190 million Americans\u2019 personal and health information. The cyberattack was the largest healthcare data breach in U.S. history.\u00a0<\/p>\n Several months later, UnitedHealth\u2019s Optum unit left an internal chatbot<\/a> used by employees to ask about claims exposed to the internet.<\/p>\n<\/div>\n