<ul data-eligibleForWebStory="true">A data breach at healthcare services company Episource has exposed personal and health data of over 5.4 million individuals in a major cyberattack.Episource is a U.S.-based company providing risk adjustment services and clinical data analytics to health plans and organizations.The breach was detected on February 6, 2025, with a threat actor accessing and copying data from January 27 to February 6.Episource shut down its systems, initiated an investigation, and informed law enforcement about the security breach.Exposed data included contact details, health insurance information, medical records, and limited Social Security numbers or birth dates.Episource began notifying affected customers starting April 23, 2025, and emphasized that not all individuals had the same data compromised.Individuals are advised to monitor their health, financial, and tax records for any unusual activity following the breach.Recent cyberattacks on healthcare organizations, like Yale New Haven Health System, highlight the ongoing cybersecurity threats in the industry.Yale New Haven Health System disclosed a data breach in April, impacting 5.5 million patients.YNHHS is the largest healthcare network in Connecticut, providing a wide range of medical services and facilities.