Sharp HealthCare Data Breach Lawsuit Investigation
Were you treated at Sharp HealthCare or insured through one of its plans? A recent ransomware attack has exposed sensitive patient data, placing thousands at risk of fraud and identity theft.
What Happened?
On April 24, 2025, Episource—Sharp HealthCare’s business associate—confirmed it was the victim of a ransomware attack that took place between January 27 and February 5, 2025. During that window, cyber-criminals infiltrated Episource’s systems and exfiltrated files containing Sharp HealthCare patient information. Sharp reported the incident to both the California Attorney General and the U.S. Department of Health and Human Services on June 6, 2025, and published a patient notice on its website.
What Information Was Exposed?
The investigation revealed that a mix of personally identifiable information (PII) and protected health information (PHI) may have been compromised, including:
- Full names and addresses
- Social Security numbers
- Dates of birth
- Government or payor ID numbers (Medicaid, Medicare, etc.)
- Phone numbers and email addresses
- Health insurance details (plan names, member/group IDs)
- Medical record numbers, diagnoses, medications, test results, images, care & treatment details
- Financial or billing information
How Sharp HealthCare & Episource Responded
Episource has launched a dedicated response website and is mailing letters to impacted individuals. Complimentary IDX identity-theft protection is being offered, and a call center is available at 877-786-2549 (Monday–Friday, 8 a.m.–8 p.m. CT) for questions.
Your Rights & Recommended Next Steps
- Enroll in free identity protection: Take advantage of the IDX services being offered.
- Monitor financial accounts: Review bank, credit-card and insurance statements for unfamiliar activity.
- Request fraud alerts or a credit freeze: Contact any of the three major credit bureaus to make it harder for bad actors to open new accounts in your name.
- Watch for phishing attempts: Be cautious of emails, texts or calls requesting personal data.
- Explore legal options: Data-breach and privacy laws may entitle you to compensation for losses and time spent mitigating risk.
Potential Compensation
If Sharp HealthCare’s or Episource’s security practices are found inadequate, affected patients could recover compensation for:
- Out-of-pocket expenses (credit monitoring, mailing fees, etc.)
- Time spent dealing with fraud or securing accounts
- Loss of use of funds or credit
- Future identity-theft risk and emotional distress
Frequently Asked Questions
Was my data included in the Sharp HealthCare breach?
You will receive (or may already have received) a mailed notice from Episource if your data was affected. You can also call 877-786-2549 for confirmation.
What is the deadline to join a Sharp HealthCare data breach lawsuit?
Deadlines vary by state and by the type of claim (consumer protection, negligence, HIPAA). Acting promptly maximizes your legal options.
Will signing up for free IDX protection hurt my lawsuit eligibility?
No. Accepting identity-protection services does not waive your right to seek compensation in a class action or individual lawsuit.
How much could I receive from a Sharp HealthCare data breach settlement?
Data-breach settlements often reimburse actual losses (up to several thousand dollars) and may provide flat cash payments for time spent. Exact amounts depend on case outcomes.
Is Sharp HealthCare offering any compensation on its own?
At this time, Sharp HealthCare and Episource are offering complimentary identity-theft protection, but no direct financial compensation. Legal action may secure additional relief.
Take Action Today
Waiting could limit your ability to recover losses or strengthen your claim.