Episource ransomware exposes 5.4M patients, spotlighting third‑party risk
A ransomware attack on Episource, UnitedHealth’s billing subsidiary, let attackers copy health and insurance data for 5.4 million patients between Jan 27 and Feb 6, 2025. The breach underscores how cyber‑criminals are shifting focus to third‑party providers, jeopardizing patient privacy across the health‑care ecosystem.