Supply chain
β Supply Chain
Sharp Healthcare Third-Party Breach (June 2025)
Primary Source βIncident Details
More than 5 million affected by data breach at healthcare tech firm Episource. California-based Episource disclosed in filings with the U.S. Department of Health and Human Services that more than 5.4 million people had their information taken in a breach discovered in February. A tech firm providing services to the healthcare industry said hackers stole information on millions of people in an incident discovered in early February. Documents filed with the U.S. Department of Health and Human Services Department show that 5,418,866 people had information taken from Episource. Third-party company: Episource.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Episource
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-06-01 Breach occurred
- 2025-06-18 Publicly disclosed