Esse Health
Disclosed Jun 20, 20251 year ago521,167 affectedConfirmed
Esse Health says April cyberattack exposed 263,000 patients
St. Louis physicians group Esse Health said a cybercriminal accessed its network in April 2025, disrupting systems from April 21, and stole patient personal and health data; over 263,000 people were notified.
What is known
| People affected | 521,167 (as reported by the organization) |
|---|---|
| Disclosed | Jun 20, 2025 |
| Discovered | Apr 21, 2025 |
| Happened | Apr 21, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health, Dates of birth, Addresses, Insurance, Other |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report: Esse Health (Healthcare Provider, MO)ocrportal.hhs.gov · Official notice | Official notice |
| Esse Health says recent data breach affects over 263,000 patientsbleepingcomputer.com · News | News |
| Vermont Attorney General: 2025-09-10 Esse Health Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-06-30 Esse Health Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Esse Healthin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS OCRtotal | Jun 20, 2025 | 23,671 |
| Indiana AGresidents of IN | Jun 25, 2025 | 454 |
| Researchtotal | Jun 27, 2025 | 263,601 |
| Vermont AGresidents of VT | Jun 30, 2025 | |
| Vermont AGresidents of VT | Sep 10, 2025 |
History of this record
- 2026-09-25 · records: 263601 to 521167 · backfill source
- 2026-09-25 · occurred: empty to 2025-04-21 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-06-30-esse-health-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-09-10-esse-health-data-breach-notice-consumers · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","dob","addresses","insurance","other"] · seed source
- 2026-09-25 · records_basis: hhs to organization · seed source
- 2026-09-25 · records: 23671 to 263601 · seed source
- 2026-09-25 · discovered: empty to 2025-04-21 · seed source
- 2026-09-25 · summary: empty to St. Louis physicians group Esse Health said a cybercriminal accessed its network in April 2025, disrupting systems from April 21, and stole patient personal and health data; over 263,000 people were notified. · seed source
- 2026-09-25 · title: empty to Esse Health says April cyberattack exposed 263,000 patients · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.