Physician group settles data breach lawsuit impacting 500,000+ individuals

Advertisement

St. Louis-based Esse Health, an independent physician group with 45 locations, has agreed to pay $2.53 million to settle a class-action lawsuit stemming from a 2025 data breach, according to a May 19 report from Claim Depot.

The cybersecurity incident impacted more than 500,000 individuals and potentially exposed information including names, Social Security numbers, addresses, dates of birth and health insurance details.

In April 2025, Esse Health detected unusual activity on some of its network systems, with the cyberattack disrupting portions of its computer network. 

The organization has denied the allegations but agreed to settle the lawsuit to avoid the expense and uncertainty of continued litigation, the report said.

At the Becker's 23rd Annual Spine, Orthopedic and Pain Management-Driven ASC + The Future of Spine Conference, taking place June 11-13 in Chicago, spine surgeons, orthopedic leaders and ASC executives will come together to explore minimally invasive techniques, ASC growth strategies and innovations shaping the future of outpatient spine care. Apply for complimentary registration now.

Advertisement

Next Up in ASC News

Advertisement