Endue Software reports hacking incident affecting 118,028 individuals
Under review: a routine re-check found that the government record may have changed since this entry was written. It is being checked and will be corrected if needed (since 2026-10-20).
Benefits administrator Endue Software filed a breach report with HHS OCR on April 11, 2025, disclosing a hacking/IT incident that exposed data for 118,028 individuals. As a Business Associate, Endue is required to notify its covered entity clients, who must then notify affected patients. The breach occurred on a network server. If your organisation contracts with Endue for claims processing or other services, verify whether you have received notification from them. If you are a covered entity, ensure you have protocols in place to receive and act on such vendor notifications promptly. This filing date reflects when the report was submitted to HHS, not necessarily when the incident occurred or was discovered.
Primary source: HHS OCR Breach Portal — Endue Software (ME) · reported 04/11/2025 · 118,028 individuals · Checked against the record 2026-10-20