Epionce Data Breach Lawsuit Investigation
Were you recently notified that your personal data was exposed by Epionce? The Idaho-based skincare company has alerted consumers that sensitive information—possibly including your Social Security number—was compromised. Find out how to protect yourself and whether you can pursue a legal claim below.
What Happened?
On August 6, 2025, Epionce (legally Episciences, Inc. d/b/a Epionce) submitted a data-breach filing to the Massachusetts Attorney General. The company indicated that an unnamed security incident allowed unauthorized access to files containing personally identifiable information (PII). Epionce began mailing written notifications to affected individuals the same day.
Data Exposed
- Name
- Social Security number
The volume of impacted records has not yet been disclosed.
Timeline of Key Events
- August 6 2025 — Breach reported to Massachusetts AG and notification letters mailed.
- August 2025 — Two years of complimentary credit monitoring offered to all confirmed victims.
Your Legal Options
Victims of data breaches may be entitled to compensation for:
- Out-of-pocket expenses (credit freeze fees, notary costs, etc.).
- Time spent addressing fraud or securing accounts.
- Emotional distress and loss of privacy.
- Future identity-theft protection services beyond the two-year window.
If you received a notice from Epionce, you can join an investigation seeking to recover these damages at no upfront cost.
Download Official Breach Notice (PDF)Protecting Yourself Now
Even if you join a potential lawsuit, it’s important to immediately safeguard your identity:
- Activate the free credit monitoring offered by Epionce.
- Place a fraud alert or credit freeze with Experian, Equifax and TransUnion.
- Monitor bank and credit-card statements for unfamiliar charges.
- Change passwords on any accounts that share the same credentials.
- File an identity-theft report with the FTC at IdentityTheft.gov if you notice suspicious activity.
About Epionce
Founded in 2002 by dermatologist Dr. Carl Thornfeldt, Epionce produces medical-grade skincare products such as cleansers, serums and firming masks. The company is headquartered in Boise, Idaho, and employs more than 50 people.
FAQ: Epionce Data Breach
How do I know if I’m affected by the Epionce data breach?
You should have received a written notice dated August 6, 2025. If you’re unsure, contact Epionce’s support line listed in the letter or check state breach-notification sites.
What information was compromised in the Epionce breach?
The company reported that names and Social Security numbers were involved. No payment-card or medical data has been confirmed at this time.
Is the free credit monitoring from Epionce enough protection?
Credit monitoring is a helpful start, but adding a credit freeze and identity-theft insurance can provide stronger, longer-term safeguards.
Can I sue Epionce for the data breach?
Individuals whose information was exposed may be eligible to participate in a class action or mass-arbitration claim seeking monetary damages and enhanced security measures from Epionce.
What is the deadline to join a lawsuit over the Epionce breach?
Deadlines vary by state, but many statutes of limitation range from one to four years after discovery of the breach. Acting quickly preserves your rights.
Will Epionce cover any future losses I experience?
Epionce has offered 24 months of monitoring, but that may not cover future fraud. Legal action can seek additional reimbursement.
Attorney Advertising. Prior results do not guarantee a similar outcome.