Minnesota Epilepsy Group and ECBM Data Breaches Prompt Class Action Investigations

Classaction

Minnesota Epilepsy Group and ECBM Data Breaches Prompt Class Action Investigations

First seen 8 Jun 2026, 19:52 UTC • •51.9

Article Content

1 / 4

Browse articles

ThreatCluster •June 9, 2026 at 19:30 UTC

•Minnesota Epilepsy Group reported a data breach affecting personal and medical information.
•ECBM disclosed a breach involving sensitive financial and health data from 2024.
•Both organizations are under investigation for potential class action lawsuits.

Two significant data breaches have been reported: the Minnesota Epilepsy Group and ECBM. The Minnesota Epilepsy Group breach was discovered on April 7, 2026, with unauthorized access occurring between March 19 and April 10, exposing personal and medical information of affected individuals. Notification letters were sent out starting June 5, 2026. Meanwhile, ECBM, an insurance company, detected suspicious activity on October 25, 2024, with unauthorized access occurring from October 19 to 25, compromising sensitive personal and financial data. Both organizations are now facing potential class action lawsuits as attorneys seek to hear from affected individuals. The breaches have raised concerns about data protection practices in the healthcare and insurance sectors.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 105d ago How this analysis works

Timeline

2024-10-25

ECBM breach detected

ECBM reported suspicious activity and confirmed unauthorized access to its systems between October 19 and 25, 2024.

2026-04-07

Minnesota Epilepsy Group breach discovered

Unauthorized access was detected, with investigations revealing data exposure from March 19 to April 10, 2026.

2026-05-18

Compromised data analysis completed

Analysis confirmed exposure of names, Social Security numbers, and medical information for individuals affected by the breach.

2026-06-05

Notification letters mailed to affected individuals

Minnesota Epilepsy Group began notifying individuals whose data may have been compromised.

2026-06-08

Class action investigations announced

Attorneys are seeking individuals affected by both breaches to potentially file class action lawsuits.

More articles in this cluster (3)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
T1567.002 - Exfiltration to Cloud Storage

Organization (2)

ECBM
Minnesota Epilepsy Group

Indicator (1)

classaction.org

Relationships

Data Breach related to ECBM
Data Breach related to Minnesota Epilepsy Group
Data Breach related to classaction.org
Data Breach related to T1567.002 - Exfiltration to Cloud Storage

Following this threat?

Track ECBM in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…

Massive Network of AI Proxy Servers Used for Malicious Activities Uncovered Security researchers from Team Cymru have identified over 10,000 proxy servers in China facilitating malicious AI activities. These servers, termed 'transfer stations,' are primarily used to bypass geographic restrictions and conduct model distillation attacks against frontier AI models. The infrastructure allows…