On December 12, 2023, ESO Solutions, Inc. (“ESO”) filed a notice of data breach with the Attorney General of Maine following a September 2023 cyberattack. In this notice, ESO explains that the incident resulted in an unauthorized party being able to access patients’ sensitive information, which includes their names, Social Security numbers, dates of birth, injury types, injury dates, treatment dates, and treatment types. Upon completing its investigation, ESO began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from ESO Solutions, Inc., it is essential you understand what is at risk and what you can do about it. As we’ve discussed in previous posts, data breaches that leak your Social Security number are especially concerning because of the ease with which hackers can use your SSN to steal your identity or commit other frauds against you. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the ESO Solutions data breach. For more information, please see our recent piece on the topic here.

What Caused the ESO Solutions Data Breach?

The ESO Solutions data breach was only recently announced, and more information is expected soon. However, ESO’s filing with the Attorney General of Maine provides some important information on what led up to the breach. According to this source, on September 28, 2023, ESO detected and stopped a ransomware attack after an unauthorized party was able to encrypt portions of the company’s computer network. In response, ESO retained third-party data security specialists to assist with the company’s investigation and to safely restore its computer systems.

On October 23, 2023, the ESO investigation confirmed that an unauthorized party was able to access portions of its computer system, including files containing confidential patient information.

After learning that sensitive patient data was accessible to an unauthorized party, ESO Solutions reviewed the compromised files to determine what information was leaked and which patients were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number, date of birth, injury type, injury date, treatment date, and treatment type.

On December 12, 2023, ESO Solutions sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About ESO Solutions, Inc.

Founded in 2004, ESO Solutions, Inc. is a data and software company headquartered in Austin, Texas. ESO provides software services designed to help hospitals and healthcare systems, including private EMS agencies, fire departments, and state EMS offices, improve operations, quality of care, and patient outcomes. ESO Solutions employs more than 500 people and generates approximately $227 million in annual revenue.