Episource data breach impacts patients at Sharp Healthcare
Experts warn that the ransomware attack on Episource could lead to rising healthcare system vulnerabilities as patient data theft increases in 2025.
Episource, a UnitedHealth Group-owned health analytics firm, has confirmed that patient data was compromised during a ransomware attack earlier this year.
The breach affected customers, including Sharp Healthcare and Sharp Community Medical Group, who have started notifying impacted patients. Although electronic health records and patient portals remained untouched, sensitive data such as health plan details, diagnoses and test results were exposed.
The cyberattack, which occurred between 27 January and 6 February, involved unauthorised access to Episource’s internal systems.
A forensic investigation verified that cybercriminals viewed and copied files containing personal information, including insurance plan data, treatment plans, and medical imaging. Financial details and payment card data, however, were mostly unaffected.
Sharp Healthcare confirmed that it was informed of the breach on 24 April and has since worked closely with Episource to identify which patients were impacted.
Compromised information may include names, addresses, insurance ID numbers, doctors’ names, prescribed medications, and other protected health data.
The breach follows a troubling trend of ransomware attacks targeting healthcare-related businesses, including Change Healthcare in 2024, which disrupted services for months. Comparitech reports at least three confirmed ransomware attacks on healthcare firms already in 2025, with 24 more suspected.
Given the scale of patient data involved, experts warn of growing risks tied to third-party healthcare service providers.
Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!