Highlands Oncology Group Data Breach Investigation

Highlands Oncology Group provides cancer care treatment to patients in Rogers, Fayetteville, Springdale, and Mountain Home, Arkansas. Periodically from January 21, 2025 through June 2, 2025, an unauthorized character had access to its network making personally identifiable information (“PII”) and protected health information (“PHI”) available to the cybercriminal. Over 113,000 individuals had their PII and PHI compromised and the PII and PHI included the individuals’ name, date of birth, Social Security number, driver’s license/state identification number, passport number, credit/debit card number, financial account number, medical treatment information, medical record number, patient account number, and/or health insurance policy information. On August 1, 2025, the practice began notifying the affected individuals about the breach by sending letters. If you or someone you know receives a notification letter about the data breach and would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.