ESO Solutions
Disclosed Dec 12, 20232 years ago2,700,000 affectedConfirmed
The business associate (BA), ESO Solutions reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 2,700,000 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, Social Security numbers, diagnoses and conditions, medications, and other treatment information. The CE took several corrective actions including additional administrative and technical safeguards in its mitigation efforts.
What is known
| People affected | 2,700,000 (as reported to HHS) |
|---|---|
| Disclosed | Dec 12, 2023 |
| Discovered | Sep 28, 2023 |
| Happened | Sep 17, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: ESO Solutionsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: ESO Solutionsatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: ESO Solutionsjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-12-12 ESO Solutions Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): ESO Solutions (Business Associate, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Dec 12, 2023 | |
| HHS archivetotal | Dec 18, 2023 | 2,700,000 |
| California AGresidents of CA | Dec 19, 2023 | |
| California AGresidents of CA | Dec 20, 2023 | |
| Washington AGresidents of WA | Dec 20, 2023 | 810 |
| Washington AGresidents of WA | Dec 20, 2023 | 2,298 |
| Oregon DOJresidents of OR | Dec 20, 2023 | 2,700,000 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 2700000 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), ESO Solutions reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 2,700,000 individuals. The PHI involved included names, addresses, telephone numbers, dat · backfill source
- 2026-09-25 · disclosed: 2023-12-19 to 2023-12-12 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-09-28 · backfill source
- 2026-09-25 · disclosed: 2023-12-20 to 2023-12-19 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.