Episcopal Retirement Services

Episcopal Retirement Services is headquartered in the United States of America and operates under the alias Episcopal Retirement Services, reflecting its affiliation with the Episcopal Church. The organization provides retirement services aimed at supporting older adults through housing, care, and related support offerings. Its mission centers on enhancing the quality of life for seniors by offering residential options and assistance that address health, wellness, and daily living needs. As a faith‑based provider, it integrates spiritual care and community engagement into its service model. Because the organization handles protected health information, it is subject to federal privacy regulations such as the Health Insurance Portability and Accountability Act (HIPAA). The organization serves a population of retirees seeking a supportive environment that combines independent living with access to varying levels of care as needed.

In September 2021 Episcopal Retirement Services experienced two separate ransomware attacks that occurred within a one‑month period, compromising its systems and servers. The attacks exposed protected health information including names, addresses, social security numbers, medical diagnoses, insurance details, and Medicare numbers for potentially over 4,000 individuals. While the organization confirmed both incidents as ransomware, the specific intrusion method remained undetermined during the ongoing investigations. A threat actor group identified as Groove listed the entity on its leak site following the second attack, although the group’s actual involvement was unclear before the site subsequently disappeared. These events underscore the organization’s exposure to cyber threats and its responsibility to safeguard sensitive personal and health data. The details of the attacks were documented by Databreaches.net and preserved in an archived version of the article. The scale of Episcopal Retirement Services’ operations, such as the number of facilities or resident count, is not disclosed in the available sources, so quantitative metrics are omitted from this profile.