Sharp HealthCare Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Sharp HealthCare data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Sharp HealthCare
Sharp HealthCare is a not-for-profit, integrated health care system based in San Diego, California. Founded in 1946, the organization operates four acute-care hospitals, four specialty hospitals, and three affiliated medical groups.
With over 20,000 employees and approximately 2,800 affiliated physicians, Sharp HealthCare medical services include primary care, heart care, cancer treatment, orthopedics and more.
What Happened?
Sharp HealthCare was impacted by a data breach involving one of its business associates, Episource. On April 24, 2025, Episource confirmed that Sharp was among its customers affected by a ransomware attack.
The breach occurred between January 27, 2025, and February 5, 2025, when unauthorized parties accessed and acquired sensitive information. Sharp Healthcare notified the California Attorney General's office and the U.S. Department of Health and Human Services on June 6, 2025 and also posted a data breach notice to patients on its own website.
Episource set up a dedicated data breach response website and began notifying affected individuals on April 23, 2025.
Exposed Information:
- Name
- Address
- Phone number
- Date of birth
- Health insurance data which includes health plans/policies, insurance companies, member/group ID numbers and Medicaid/Medicare/government payor ID numbers
- Health data which includes medical record numbers, doctors, diagnoses, medications, test results, images, care and treatment
Your Rights and Next Steps
If you received a notice about this data breach or believe your information may have been involved, you have important rights. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
Affected individuals have the right to:
- Identity theft protection services: Sign up for the free IDX identity theft protection services offered by Episource on the dedicated response website.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help you understand your rights and determine if you are eligible to join a class action lawsuit.
You May Be Entitled to Compensation
If your information was exposed in the Sharp HealthCare data breach, you may be entitled to financial compensation. Laws protect your privacy and give you the right to seek damages when your sensitive information is compromised due to inadequate security measures.
Lawyers are investigating this cybersecurity incident and are prepared to help you take the next steps. Complete the form below to find out if you qualify.