ESO Solutions’ Data Breach Impacts 2.7 Million Individuals

Austin-based software services provider for healthcare companies and fire departments, in a public notice revealed that data belonging to nearly 3 million patients has been compromised in a security-related incident.

According to the notice, the incident was first detected by ESO on September 28, 2023, which resulted in data exfiltration before the hackers encrypted a number of its system. Upon discovery, ESO Solutions immediately isolated the impacted system, deployed additional security measures, and partnered with third-party forensic experts to gauge the impact and scale of the incident.

During the ongoing investigation, it discovered that a system containing sensitive information of patients had been breached. ‘’On October 23, 2023, ESO determined that personal and patient health information was located on one of its impacted systems,’’ the notice revealed. It is said to affect individuals registered with its customers, i.e., hospitals and clinics in the US.

The stolen information included, ‘’names, dates of birth, injury type and date, treatment type and date, procedure information, and, in some cases, Social Security Numbers.’’

The security-incident was reported to the concerned Federal authorities, including the FBI. All the impacted customers were first notified on December 12, and some of the affected healthcare facilities sent our individual breach notices to patients.

In addition to securing and restoring its systems and operations ‘’via viable backups,’’ ESO will be offering a 12-month identity monitoring service coverage to all impacted individuals.

Although the full list of hospitals and facilities impacted was not disclosed by the organizations; the notice filed with the Office of the Maine Attorney General revealed the following names:

• Mississippi Baptist Medical Center
• Memorial Hospital at Gulfport Health System
• Merit Health River Oaks
• Forrest General Hospital
• Alaska Regional Hospital
• ESO EMS Agency
• Providence Kodiak Island Medical Center
• Ascension Providence Hospital in Waco
• Manatee Memorial Hospital
• Desert View Hospital
• CaroMont Health

In recent days, several prominent healthcare facilities, particularly in the US, have been victims of ransomware attacks, like Norton Healthcare, Ardent Health Services, among others.