Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The Maine Attorney General’s breach entry reports that the 2023 ESO Solutions ransomware incident affected 2.7 million people. That is the number recorded in the state entry, not an independently audited count. The information potentially involved varied by person and could include health details and Social Security numbers. If you received a notice, use it to confirm whether you were affected and what information applied to you.

What happened in the ESO Solutions breach?

ESO Solutions, a healthcare software and services vendor, reported a ransomware incident detected and stopped on September 28, 2023. In a filing dated December 20, 2023, with the Washington State Attorney General, ESO said an unauthorized party accessed and encrypted some of its computer systems. The filing says ESO took affected systems offline, secured its network environment, brought in third-party forensic specialists, restored systems and operations from backups, and notified the FBI. ESO said it began notifying potentially affected clients on a rolling basis on December 12, 2023. Read the Washington State filing.

The Maine Attorney General’s breach record lists 2.7 million people affected, including 499 Maine residents. It gives September 28, 2023, as both the breach and discovery date, and records that written consumer notifications continued through March 1, 2024. See the Maine Attorney General’s entry.

What information did the ESO breach expose?

The data varied according to the person and the ESO customer involved. The Washington filing says personal and patient health information was located on an impacted system on October 23, 2023. It lists names, dates of birth, injury type and date, treatment date and type, and Social Security numbers in some cases. The information belonged to patients associated with ESO customers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For patients connected with Carle Health, ESO provided trauma-registry services. Carle’s notice says potentially affected information could vary by person and include:

  • Name, date of birth, phone number, and address.
  • Patient account or medical-record number.
  • Injury type and diagnosis, and procedure type.
  • Insurance and payer information.
  • Social Security number for some people.

Carle said it had not identified evidence of patient information being misused at the time of its notice. That is a time-specific statement about Carle’s investigation, not proof that no information was misused elsewhere or could not be misused later. Read Carle Health’s notice.

Was I affected by the ESO Solutions data breach?

The 2.7 million figure is a count reported in the Maine Attorney General’s entry; it does not mean every person had the same records or data fields involved. ESO’s customers included healthcare providers, and the Washington filing describes information belonging to patients associated with those customers.

Your own breach letter is the best source for determining whether you were affected. Check it for the provider or customer named, the information categories that may apply to you, any protection service offered, and the correct contact route for questions. If you are unsure whether a notice is genuine, contact the provider using contact information from its official website rather than relying on an unfamiliar link or phone number in an unexpected message.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What should I do if I received an ESO data breach letter?

  1. Read the notice closely. Confirm the named provider, which data types may have been involved, and whether the notice describes an identity-protection offer or gives a dedicated assistance contact. Eligibility and covered information can differ between notices.
  2. Use any included protection service if you choose. The Maine Attorney General’s entry records a 12-month Kroll identity-theft-protection offer. Follow your own letter’s enrollment instructions and deadlines; do not assume you qualify for an offer described in another person’s notice. A paid service is not required to take basic protective steps.
  3. Review your credit reports. Carle’s notice directs readers to AnnualCreditReport.com and points to official resources for fraud alerts and security freezes. Check the notice for the resources relevant to your situation.
  4. Consider a fraud alert or security freeze. These are separate options described in Carle’s notice. Review the official guidance linked there to decide whether either makes sense for you.
  5. Pay attention to unfamiliar activity. Because some notices identify health, insurance, or patient-account data as potentially involved, review statements and communications from relevant providers or insurers and contact them through a verified channel about anything you do not recognize.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Is the ESO Solutions settlement still open?

The court-authorized settlement FAQ identifies the case as In re ESO Solutions, Inc. Breach Litigation, Case No. 1:23-cv-01557-RP, before Judge Robert Pitman in the U.S. District Court for the Western District of Texas. The described potential class is people who received an ESO notice and were Texas residents when ESO distributed that notice. ESO denies wrongdoing, and the FAQ says no court had determined wrongdoing in the litigation description. Check the settlement administrator’s FAQ.

The FAQ lists a March 12, 2026 claim deadline; a February 10, 2026 deadline to opt out or object; and a May 5, 2026 final-approval hearing. Those dates have passed as of October 4, 2026. The FAQ describes reimbursement for documented out-of-pocket losses fairly traceable to the incident, up to $5,000 per individual, and pro rata cash payments for valid claims. Its accessible information does not establish whether final approval occurred, whether appeals remain, whether claimants will receive payment, or when payments may be distributed. Contact the court-authorized settlement administrator for current status; the published deadlines are not a basis to assume a claim can still be filed or that payment is imminent.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.