United States
USA
Esse Health cyberattack disables patient-facing systems and phones for weeks
Esse Health identified unauthorized network access on April 21, 2025. The cyber event took down primary patient-facing network systems and phone services, constrained appointment-related workflows during restoration, and involved copying of patient files. Primary patient-facing systems and phones were restored by June 2.
74
Estimated severity
74 / 100
98
Source reliability
98 / 100
Approximate Date
21/04/2025
Targeted Company
ESSE HEALTH
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
Missouri · United States
Operational Impact
Duration
42 days
Financial impact (USD M)
No information
Impact types
Service unavailabilityService degradationOperational disruption
Affected sectors
Healthcare & Public Health
Affected departments
Information TechnologyCustomer Service
Attack Profile
Attack types
Unauthorized accessData exfiltration
Attributed threat actors
No information
Sources
Incident Sources
essehealth.comhttps://www.essehealth.com/network-updates/bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/esse-health-says-recent-data-breach-affects-over-263-000-patients/maine.govhttps://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2374dd24-9fb6-41bf-ab1f-ce11920ffeb3.html