Missouri Healthcare Provider Cyberattack Exposes Data of Over 260,000 Patients

A cyberattack on Esse Health exposed personal and medical information of over 263,000 patients, prompting a wide-scale security and legal response.

Cyberattack hits Esse Health

Missouri-based healthcare provider Esse Health disclosed that personal information of more than 263,000 patients was compromised in a cyberattack discovered in April 2025. The breach affected both communication systems and sensitive data.

The independent physician group, which operates in the Greater St. Louis area, detected unusual network activity on April 21. The organization immediately enlisted cybersecurity specialists and informed law enforcement.

An internal probe later confirmed that threat actors gained access and stole files containing personal information.

Sensitive data compromised, investigation underway

The stolen information included names, Social Security Numbers (SSNs) and health insurance details. While the company said the intruders didn’t download or directly access electronic medical records, the nature of the information is sensitive enough to spark concern about identity theft and medical fraud.

Esse Health is notifying affected individuals by mail and has submitted a breach report to the Maine Attorney General’s Office, confirming that 263,601 people were impacted. Although there’s no evidence yet of malicious use, the organization is offering complimentary identity protection services to those affected.

Company strengthens security following breach

Since the attack, Esse Health has carried out a series of enhanced cybersecurity protocols designed to prevent future intrusions. The healthcare group has not released technical details about the breach, but the extent of the disruption has led experts to speculate that ransomware may have been involved.

Esse Health encouraged all patients to remain vigilant, regularly check credit reports and review account statements for any suspicious activity.

Damage control in the event of data breach

Although most data breaches occur outside of our control, being prepared can significantly minimize damages. Using dedicated software like Bitdefender Digital Identity Protection can help you monitor your online data, including traces from services you no longer use.

It continuously scans both the public and Dark Web for traces of your data, notifies you instantly if you have been compromised in a data breach, and helps you patch holes in your digital footprint with quick, one-click action items.