Esse Health
Data Breach Class Action Lawsuit

Posted: July 1, 2025 -- Attention, victims of the Esse Health data breach.

Abington Cole + Ellery is investigating the data breach recently announced by Esse Health.

Esse Health Data Breach Summary:

Approximately 263,000 individuals were affected by the Esse Health data breach, and breached data may include, but is not necessarily limited to: name, address, Social Security number, date of birth, medical record number, health data, patient account data, and health insurance data.

On April 21, 2025, unusual activity was reportedly detected within the Esse Health network. Once identified, an investigation began with support from outside cybersecurity and forensic experts. The findings confirmed that a cybercriminal had entered the Esse Health network on that same day. During their time inside, they accessed and copied specific files. According to Esse Health, the NextGen electronic medical record system remained untouched and uncompromised throughout the incident.

Esse Health says a detailed review of those files followed to understand what data had been exposed and whose information was affected. This process purportedly revealed that some of the compromised files contained personal data belonging to certain individuals. In response, Esse Health says it took immediate action to secure its systems and notified law enforcement of the incident.

To reinforce its data protection efforts, the Esse Health claims to have also introduced new information security measures.

As a result of the data breach, Esse Health is offering 12 months of free credit monitoring and/or identity theft protection services to some affected individuals.

Additional information about the Esse Health data breach may be found here: Esse Health Data Breach Notification (Maine). The Esse Health Website may also have additional information about or provide periodic updates regarding the data breach.

About Esse Health:

Esse Health is a physician-led organization that operates a network of medical practices across the St. Louis metropolitan area. Founded with the objective of integrating clinical care with coordinated services, the organization provides a range of primary care and specialty services. Its model emphasizes physician governance and centralized administrative support, enabling clinical professionals to focus on patient interactions and health outcomes. Esse Health includes internists, pediatricians, and specialists who collaborate to manage both acute and chronic conditions through a unified system.

The organization’s infrastructure incorporates in-house capabilities such as laboratory testing, radiology, and disease management programs. Electronic health records and patient portals are used to support communication and data management. Through population health initiatives and care coordination efforts, Esse Health tracks performance metrics related to preventive services, patient compliance, and resource utilization. These programs are aligned with broader efforts to reduce hospital admissions and improve continuity of care across provider settings.

Esse Health participates in value-based care arrangements with insurers and other stakeholders. Its operations include partnerships with Medicare Advantage plans and commercial insurers to implement cost-containment strategies and care quality benchmarks. The organization maintains a governance structure composed of physicians and executive leadership, which guides decisions related to clinical operations, resource allocation, and long-term planning. The system functions as an integrated entity that links independent practices under a unified operational framework.

For more information about steps you can take to possibly reduce the chances harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?

If you believe you are a victim of the Esse Health data breach, and if you would like to volunteer to serve as a class representative in a class action lawsuit regarding this data breach, please submit your information via the form on this webpage. This website is not associated with nor authorized by Esse Health or any affiliated companies. If you have received any other data breach notifications, you may to review Abington Cole + Ellery's current list of data breach investigations.