Episource has reported a data breach affecting over 5 million patients in the U.S., following a cyberattack that occurred between January 27 and February 6, 2025. The breach exposed various sensitive health information, including names, addresses, and medical records, although no banking or payment card data was compromised. Affected individuals are being notified and advised to monitor for suspicious activity.

UnitedHealth's acquisition of health tech firm Episource has raised concerns following a data breach that exposed sensitive patient information. The breach, which affected numerous individuals, has prompted investigations and heightened scrutiny regarding data security practices in the healthcare industry.