Breachesby GlyphESO Solutions
Disclosed Dec 12, 20232,700,000 affectedConfirmed
The business associate (BA), ESO Solutions reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 2,700,000 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, Social Security numbers, diagnoses and conditions, medications, and other treatment information. The CE took several corrective actions including additional administrative and technical safeguards in its mitigation efforts.
What is known
| People affected | 2,700,000 (as reported to HHS) |
|---|---|
| Disclosed | Dec 12, 2023 |
| Discovered | Sep 28, 2023 |
| Happened | Sep 17, 2023 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: ESO SolutionsWashington Attorney General breach notice: ESO SolutionsOregon DOJ breach notice: ESO SolutionsVermont Attorney General: 2023-12-12 ESO Solutions Data Breach Notice to ConsumersHHS OCR breach report (archive, resolved): ESO Solutions (Business Associate, TX)
Notices filed
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 2700000by backfillSource
empty to The business associate (BA), ESO Solutions reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 2,700,000 individuals. The PHI involved included names, addresses, telephone numbers, datby backfillSource
2023-12-19 to 2023-12-12by backfillSource
other to healthby backfillSource
unknown to ransomwareby backfillSource
empty to 2023-09-28by backfillSource
2023-12-20 to 2023-12-19by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.