Episource Under Investigation for Data Breach of 5.4 Million Customer Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the sensitive personal and health information of 5.4 million customers of Episource, a California-based healthcare services and technology company.

According to the company, an unauthorized party gained access to Episource’s computer systems between January 27, 2025 and February 6, 2025.  

The company recently informed patients that the following personal and health information may have been stolen in the breach: names; Social Security numbers; health insurance information; dates of birth; and medical information, including diagnosis, physician information, medical record numbers, Medicare/Medicaid information, prescription/medication information, and diagnostic and treatment information.

Although the breach occurred over five months ago, Episource only began notifying impacted patients on or around April 23, 2025, which may have violated state and federal laws.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to Episource’s cybersecurity practices.

If you received notification of this data breach or are a customer of Episource and wish to obtain additional information about your legal rights, please fill out the form below.