United States
USA
Esse Health cyberattack disables patient-facing systems and phones for weeks
Esse Health identified unauthorized network access on April 21, 2025. The cyber event took down primary patient-facing network systems and phone services, constrained appointment-related workflows during restoration, and involved copying of patient files. Primary patient-facing systems and phones were restored by June 2.
74
Estimated severity
74 / 100
98
Source reliability
98 / 100
Approximate Date
2025-04-21
Targeted Company
ESSE HEALTH
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
Missouri · United States
Operational Impact
Duration
42 days
Financial impact (USD M)
No information
Impact types
Operational disruptionService degradationService unavailability
Affected sectors
Healthcare & Public Health
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Data exfiltrationUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
essehealth.comhttps://www.essehealth.com/network-updates/bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/esse-health-says-recent-data-breach-affects-over-263-000-patients/maine.govhttps://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2374dd24-9fb6-41bf-ab1f-ce11920ffeb3.html