On June 2, 2023, EpiSource LLC filed a notice of data breach with the Attorney General of California after learning that suspicious activity within the company’s Amazon Web Services (“AWS”) environment resulted in an unauthorized party being able to access confidential consumer data. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, dates of birth, addresses, phone numbers, medical record numbers, health plan ID numbers, provider information, diagnoses and medications. After confirming that consumer data was leaked, EpiSource began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.
If you received a data breach notification from EpiSource, it is essential you understand what is at risk and what you can do about it. As we’ve discussed in previous posts, software companies have recently become a major target for hackers hoping to steal confidential information they can use to commit identity theft and other frauds. However, there are steps you can take to mitigate these risks. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the EpiSource data breach, reach out to a data breach lawyer for assistance.
What We Know So Far About the EpiSource Breach
News of the EpiSource data breach is still fresh; however, what we know at this point comes from the company’s filing with the Attorney General of California. According to this source, on February 20, 2023, EpiSource detected suspicious activity within the company’s AWS environment. In response, EpiSource took the necessary steps to contain the incident and prevent further access. Next, EpiSource launched an investigation into the incident with the assistance of an outside data security firm.
The EpiSource investigation revealed that an unauthorized party was able to access the company’s AWS environment between February 19, 2023 and February 23, 2023. Subsequently, on February 20, 2023, EpiSource confirmed that some of the files that were accessible to the unauthorized party contained confidential consumer information.
Upon discovering that sensitive consumer data was made available to an unauthorized party, EpiSource began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, address, phone number, medical record number, health plan ID number, provider information, diagnoses and medications. EpiSource has confirmed that the incident did not impact Social Security numbers or financial account information.
On June 2, 2023, EpiSource sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About EpiSource LLC
Founded in 2006, EpiSource LLC is a software company based in Gardena, California. The company creates software for health plans and providers, enabling them to manage risk. Some of the issues that EpiSource software allows health plans and providers to manage include analytics, program management, gap closure, reporting, and CMS submissions. EpiSource employs more than 5,000 people and generates approximately $1.1 billion in annual revenue.
