Over 260,000 Patients Affected in St. Louis Healthcare Data Breach
Esse Health, a major independent primary care provider in the Midwest, has confirmed a data breach that compromised sensitive personal information of more than 263,000 patients.
The breach, which occurred in late April 2025, allowed unauthorized attackers to access and steal files containing confidential patient details. In notifications sent to affected individuals and a disclosure to the Maine Attorney General’s Office, the organization listed the types of exposed information, which include:
- Full names
- Home addresses
- Dates of birth
- Health insurance details
- Medical record numbers
- Patient account numbers
- Other medical information
Stolen medical data can be exploited for identity theft, fraudulent insurance claims, and prescription scams. Such data is also commonly used in phishing attacks where cybercriminals pose as medical professionals to extract more information or spread malware.
While there is currently no evidence that the stolen data has been misused, Esse Health is offering complimentary identity protection services to those affected as a preventive measure.
The healthcare group, which runs 45 locations across the St. Louis metropolitan area, provides services ranging from family medicine to radiology. The incident highlights growing cybersecurity threats facing healthcare providers and the potential risks to patient privacy.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
