The Daily Security Review reports:
Episource, a key healthcare services provider under UnitedHealth Group’s Optum division, has disclosed a significant data breach that exposed the sensitive personal and medical data of more than 5.4 million individuals. The company, which offers risk adjustment and medical coding services to healthcare providers and insurers, identified unauthorized access to its systems earlier this year.
The breach was discovered on February 6, 2025, after Episource detected unusual activity and took its systems offline to contain the threat. According to the company’s notification, the attackers may have had access to internal systems for up to 10 days—from January 27 to February 6.
Data potentially accessed or copied includes a broad set of personally identifiable information and medical details….
Read more at The Daily Security Review.