Patients of Esse Health, a primary care network based in the St. Louis metropolitan area, have until August 4 to file claims for a $50 payment and two years of free credit monitoring following a data breach the company detected in spring 2025. The offer applies to individuals who received a breach notification letter from Esse Health, and the deadline leaves little time for those who haven’t yet responded.
The breach traces back to April 21, 2025, when Esse Health identified suspicious activity on its network, according to a formal notification filed with the Massachusetts Attorney General’s office. The company launched an investigation, and state regulators in both Massachusetts and Maine subsequently published official breach records confirming that personal information may have been accessed.
What was exposed and why it matters
The attorney general filings describe broad categories of data that may have been compromised, potentially including names, addresses, medical records, and Social Security numbers. The exact mix of exposed information varies by patient, but the range of categories listed in the notices signals that some individuals could face risks beyond garden-variety spam, including medical identity theft and fraudulent credit accounts opened in their names.
Medical identity theft is particularly difficult to unwind. Unlike a stolen credit card number, a compromised medical record can lead to false entries in a patient’s health history, bogus insurance claims, and billing disputes that surface months or years later. Two years of credit monitoring can flag new accounts opened with stolen personal details, but it won’t catch every form of misuse tied to health data.
How to file a claim before the deadline
Patients who received a notification letter from Esse Health should follow the instructions included in that letter to file a claim for the $50 payment and enroll in the credit monitoring program. The Maine Attorney General’s breach notice database confirms that Esse Health arranged identity protection services for affected individuals, including details on the monitoring provider and the duration of coverage.
Anyone who believes they were an Esse Health patient but did not receive a letter should contact the company directly. Breach notifications sometimes go to outdated addresses, and patients who moved or changed contact information after their last visit may have missed the mailing.
Regardless of whether they file a claim, affected patients can take additional steps on their own. Placing a free fraud alert or credit freeze through Equifax, Experian, or TransUnion adds a layer of protection that doesn’t depend on the company’s monitoring program. Reviewing explanation-of-benefits statements from health insurers can also help catch signs of medical identity theft early.
What the public record does and doesn’t show
The two state attorney general filings are the strongest publicly available sources on this breach as of July 2025. They confirm the April 21 detection date, the notification of consumers, and the offer of identity protection services. Neither filing specifies the total number of patients affected, and Esse Health has not released a detailed public summary of its forensic investigation beyond the language in the notification letters.
The $50 payment amount and the August 4 filing deadline are terms communicated to patients through the breach notification process rather than detailed in the state regulatory postings. Patients should refer to their individual notification letters for the specific instructions and terms that apply to their claims.
Without a confirmed count of affected individuals, the full scale of the breach remains unclear from public records alone. What is clear is the timeline: patients who want the $50 payment and the monitoring benefit need to act before August 4. Once that window closes, the company-funded remediation tied to this specific incident will no longer be available, and patients will be on their own to arrange protections independently.
Free for readers: The free Retirement Shield newsletter sends plain-English help keeping more of your money in retirement — the scams to dodge, the benefits you’re owed, and what’s changing with Social Security and Medicare, a couple times a week. Get the free newsletter.
