Esse Health provides update about April cyberattack and notifies 263,601 people

Esse Health disclosed that on April 21, 2025 it detected unusual activity and later confirmed an unauthorized individual accessed and exfiltrated patient data; notifications differ on scale (23,671 reported to HHS vs. 263,601 notified to Maine). Media suggested a ransomware event, but Esse’s update did not confirm encryption or a ransom demand; exposed fields may include names, addresses, dates of birth, insurance details, medical record and account numbers, and certain health information, with no confirmed misuse reported.