Where does the Esse Health case file come from?

Every entry is taken from the breach report Esse Health lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Esse Health Data Breach

This file collects the dated facts on record for the Esse Health incident. The state report is dated June 25, 2025. The incident itself is dated April 21, 2025.

Timeline

65 days separate the incident date from the date it was reported.

April 21, 2025Incident dateWhen the filing says the breach took place.
June 25, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: June 25, 2025
Incident date: April 21, 2025
Receiving office: Indiana Attorney General

Case notes

On June 25, 2025, Esse Health officially reported a data security incident to regulatory bodies, confirming a breach that initially took place on April 21, 2025. This public filing serves to inform individuals in Indiana and establishes the incident as part of the official record.

While the specific technical nature of the breach and the precise categories of personal information involved were not detailed in the public disclosure, Esse Health has acknowledged that individual data was compromised. The filing indicates the incident is currently under investigation.

Because the exact types of exposed data are not specified in the public record, individuals should treat this incident with general caution. It is confirmed that personal information was impacted, necessitating a broad approach to safeguarding one's identity and accounts.

To help protect against potential misuse of the exposed information, it is strongly recommended that individuals regularly review all financial statements and credit reports for any transactions or inquiries they do not recognize. Placing a fraud alert with credit reporting agencies can also provide an additional layer of security.

Furthermore, be wary of unexpected communications, including emails, text messages, or phone calls, that ask for personal details. Always verify the legitimacy of such requests by contacting the organization directly through official, publicly available channels, rather than using contact information provided in the suspicious message.

Questions about this case file

Where does the Esse Health case file come from?: Every entry is taken from the breach report Esse Health lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Esse Health breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files