What is this about?

If you recently received a letter or an email from ESHYFT informing you that your sensitive personal and protected health information was compromised in a data breach, you may be entitled to compensation. ESHYFT recently disclosed that it was the victim of a data breach that exposed individuals’ sensitive personal and protected health information.

What Happened?

On January 4, 2025, cybersecurity researcher Jeremiah Fowler discovered an unprotected database belonging to ESHYFT, a New Jersey-based HealthTech company operating across 29 U.S. states. The database contained 86,341 records, totaling 108.8 GB, and was publicly accessible. Fowler notified ESHYFT of the security lapse on January 6, 2025. However, the database remained unsecured for over a month, until March 5, 2025. The exact duration of the exposure prior to its discovery and whether unauthorized parties accessed the data remain unknown. On March 10, 2025, ESHYFT issued a public disclosure regarding the breach. There is currently no confirmation of whether notice letters were sent to affected individuals.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal and protected health information may have been compromised:

• Personal Identification Information: Scans of driver’s licenses and Social Security cards, User profile pictures and facial images, Medical ID badges, User addresses, Disabled user records and other credential lanyards,
• Professional Credentials: Professional certificates, resumes, and CVs
• Spreadsheet with over 800,000 entries, including Nurse ID, Facility name, shift times and dates/ hours worked,
• Employment Records: Monthly work schedule logs and work assignment agreements,
• Medical Documents: Records potentially containing diagnoses, prescriptions, or treatments, Disability insurance claims (potentially protected under HIPAA)

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you have experienced a disruption in service from ESHYFT there is no cost or obligation to participate. Follow the link below to find out if you are eligible for compensation.