UNITEDHEALTH-LINKED HEALTH TECH FIRM EPISOURCE BREACH HITS 5.4M PATIENTS

Summary from the TLDR InfoSec newsletter

Episource, a UnitedHealth subsidiary, suffered a ransomware attack between January 27 and February 6 that exposed the data of 5.4 million patients, including medical records, diagnoses, medications, and insurance info. This is the second major breach for UnitedHealth in 13 months, following the Change Healthcare attack that affected 190 million Americans in February 2024. The attack suggests that threat actors are now targeting third-party healthcare providers to access large amounts of protected health information across multiple organizations.