Supply chain β›“ Supply Chain

Sharp Healthcare Third-Party Breach (June 2025)

πŸ“… 2025-06-01 🏒 Episource
Primary Source β†—

Incident Details

More than 5 million affected by data breach at healthcare tech firm Episource. California-based Episource disclosed in filings with the U.S. Department of Health and Human Services that more than 5.4 million people had their information taken in a breach discovered in February. A tech firm providing services to the healthcare industry said hackers stole information on millions of people in an incident discovered in early February. Documents filed with the U.S. Department of Health and Human Services Department show that 5,418,866 people had information taken from Episource. Third-party company: Episource.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Episource
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-06-01 Breach occurred
  2. 2025-06-18 Publicly disclosed