Earlier this week, ESO Solutions filed a notice of data breach with the Attorney General of Maine in the wake of what appears to have been a massive ransomware attack. The ESO data breach letter made it clear that the incident affected patient data at various hospitals and healthcare systems; however, no healthcare facilities were listed. On December 21, 2023, a HIPAAJournal article identified over a dozen medical facilities across the country that were impacted by the ESO breach, including Ascension Providence Hospital in Waco, Tallahassee Memorial, Mississippi Baptist Medical Center, and Providence Alaska Medical Center, as well as several others.
As a reminder, the ESO breach resulted in the following confidential patient data being leaked: names, Social Security numbers, dates of birth, injury types, injury dates, treatment dates, and treatment types.
If you received a data breach notification from ESO Solutions, it is essential you understand what is at risk and what you can do about it. However, because this was a third-party data breach involving patient data provided to ESO Solutions by various healthcare facilities, you may also receive notice from your healthcare provider. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the ESO Solutions data breach. For more information, please see our recent piece on the topic here.
What Caused the ESO Solutions Data Breach?
The ESO Solutions data breach was announced on December 19, 2023, when the company filed notice of the incident with several state governments. Evidently, on September 28, 2023, ESO determined that portions of the company’s computer network were encrypted by an unauthorized party. In response, ESO stopped the attack and hired third-party data cybersecurity specialists to help ESO investigate the incident.
On October 23, 2023, ESO confirmed that an unauthorized party accessed portions of its computer system, including files containing confidential patient information.
After learning that sensitive patient data was accessible to an unauthorized party, ESO Solutions reviewed the compromised files to determine what information was leaked and which patients were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, date of birth, injury type, injury date, treatment date, and treatment type.
On December 12, 2023, ESO Solutions sent out data breach letters to anyone who was affected by the recent data security incident. Initially, the facilities impacted by the ESO data breach were not known. However, more recently, HIPPAJournal posted an article noting that the following providers are reportedly affected:
- Ascension Providence Hospital in Waco
- Mississippi Baptist Medical Center
- CaroMont Health
- Merit Health Biloxi
- Merit Health River Oaks
- ESO EMS Agency
- Forrest General Hospital
- Alaska Regional Hospital
- Memorial Hospital at Gulfport
- Providence Kodiak Island Medical Center
- Providence Alaska Medical Center
- Tallahassee Memorial
- Manatee Memorial Hospital
- Desert View Hospital
More Information About ESO Solutions
Founded in 2004, ESO Solutions, Inc. is a data and software company headquartered in Austin, Texas. ESO provides software services designed to help hospitals and healthcare systems, including private EMS agencies, fire departments, and state EMS offices, improve operations, quality of care, and patient outcomes. ESO Solutions employs more than 500 people and generates approximately $227 million in annual revenue.
