Was I affected by a Highlands Oncology Group PA data breach?

If you received healthcare services from Highlands Oncology Group PA, you may have been affected by one of their 2 reported breaches. Check your mail for breach notification letters, review your medical records for unauthorized changes, and use our breach checker tool to search for specific incidents.

Was my data affected by the Highlands Oncology Group PA breach?

If you were a patient of Highlands Oncology Group PA during the breach period, your data may have been compromised. Check your mail for breach notification letters. You can also contact Highlands Oncology Group PA directly or file a records request to verify what data was accessed.

What data was exposed in the Highlands Oncology Group PA breach?

Healthcare data breaches can expose names, dates of birth, Social Security numbers, medical records, insurance information, and financial data. The specific data types vary by incident. Review the breach notification from Highlands Oncology Group PA for details on what was compromised.

Can I sue Highlands Oncology Group PA for a data breach?

Whether you can bring or join a claim depends on the incident, governing law, documented harm, filing deadlines, and any court-approved settlement terms. Review current court materials and consult a licensed healthcare data breach attorney for advice about your circumstances.

Request Records

Loading...

Highlands Oncology Group PA Data Breach History

Highlands Oncology Group PA has been involved in 2 reported healthcare data breaches affecting 167K patients.

How many data breaches has Highlands Oncology Group PA had?

Highlands Oncology Group PA has been involved in 2 reported healthcare data breaches affecting a total of 167K patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Hacking/IT Incident. If you received care from Highlands Oncology Group PA, review the timeline below to check if your data may have been compromised.

ArkansasHacking/IT Incident

2

Total Breaches

167K

Patients Affected

2023

First Breach

2025

Most Recent

Breach Timeline

2025

Highlands Oncology Group PA

2025-08-01 · Arkansas

critical

112K affectedHacking/IT IncidentNetwork Server

Based on the breach location (network server) and organization type (oncology practice), the following categories of protected health information were likely exposed: ### Confirmed/Likely Exposed Data Types: - Patient names and contact information (addresses, phone numbers, email addresses) - Social Security numbers or other government-issued identification numbers - Date of birth and age information - Insurance information (policy numbers, group numbers, subscriber IDs) - Medical record numbers and patient account numbers - Cancer diagnoses and oncology-specific clinical information - Treatment histories and chemotherapy records - Medication lists and prescription information - Laboratory results and pathology reports - Imaging reports and radiology information - Provider notes and clinical documentation - Emergency contact information - Employment information (if collected for insurance purposes) - Financial information related to billing and payment ### Potentially Exposed (depending on system configuration): - Biometric data (if used for authentication) - Genetic or genomic information (if collected for cancer treatment planning) - Mental health information (if documented in oncology records) - Substance abuse treatment information (if relevant to patient care) - HIV/AIDS status (if applicable to patient population)

2023

Highlands Oncology Group PA

2023-12-22 · Arkansas

high

55K affectedHacking/IT IncidentDesktop Computer, Network Server

While the specific data elements were not detailed in the breach submission, patients of an oncology practice typically have the following types of protected health information at risk: ### Likely Exposed Data Categories: - Full names and contact information (addresses, phone numbers, email addresses) - Social Security numbers (typically collected for billing and insurance purposes) - Date of birth and age information - Insurance information (policy numbers, group numbers, subscriber IDs) - Financial account information (bank account numbers, credit card numbers used for copayments) - Medical record numbers and patient identification numbers - Detailed clinical information including cancer diagnoses, staging information, and treatment plans - Medication lists and pharmacy information - Laboratory and pathology results - Imaging reports and radiology findings - Genetic testing results (increasingly common in oncology) - Emergency contact information - Employment information - Healthcare provider names and facility information - Insurance claim information and billing records - Appointment history and visit dates The exposure of this combination of data elements creates significant risk for identity theft, medical fraud, and unauthorized use of healthcare services.

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.

Related resources

Highlands Oncology Group PA Data Breach History

Highlands Oncology Group PA has been involved in 2 reported healthcare data breaches affecting 167K patients.

How many data breaches has Highlands Oncology Group PA had?

Highlands Oncology Group PA has been involved in 2 reported healthcare data breaches affecting a total of 167K patients. The earliest breach was reported in 2023 and the most recent in 2025. Breach types include: Hacking/IT Incident. If you received care from Highlands Oncology Group PA, review the timeline below to check if your data may have been compromised.

ArkansasHacking/IT Incident

2

Total Breaches

167K

Patients Affected

2023

First Breach

2025

Most Recent

Breach Timeline

2025

Highlands Oncology Group PA

2025-08-01 · Arkansas

critical

112K affectedHacking/IT IncidentNetwork Server

Based on the breach location (network server) and organization type (oncology practice), the following categories of protected health information were likely exposed: ### Confirmed/Likely Exposed Data Types: - Patient names and contact information (addresses, phone numbers, email addresses) - Social Security numbers or other government-issued identification numbers - Date of birth and age information - Insurance information (policy numbers, group numbers, subscriber IDs) - Medical record numbers and patient account numbers - Cancer diagnoses and oncology-specific clinical information - Treatment histories and chemotherapy records - Medication lists and prescription information - Laboratory results and pathology reports - Imaging reports and radiology information - Provider notes and clinical documentation - Emergency contact information - Employment information (if collected for insurance purposes) - Financial information related to billing and payment ### Potentially Exposed (depending on system configuration): - Biometric data (if used for authentication) - Genetic or genomic information (if collected for cancer treatment planning) - Mental health information (if documented in oncology records) - Substance abuse treatment information (if relevant to patient care) - HIV/AIDS status (if applicable to patient population)

2023

Highlands Oncology Group PA

2023-12-22 · Arkansas

high

55K affectedHacking/IT IncidentDesktop Computer, Network Server

While the specific data elements were not detailed in the breach submission, patients of an oncology practice typically have the following types of protected health information at risk: ### Likely Exposed Data Categories: - Full names and contact information (addresses, phone numbers, email addresses) - Social Security numbers (typically collected for billing and insurance purposes) - Date of birth and age information - Insurance information (policy numbers, group numbers, subscriber IDs) - Financial account information (bank account numbers, credit card numbers used for copayments) - Medical record numbers and patient identification numbers - Detailed clinical information including cancer diagnoses, staging information, and treatment plans - Medication lists and pharmacy information - Laboratory and pathology results - Imaging reports and radiology findings - Genetic testing results (increasingly common in oncology) - Emergency contact information - Employment information - Healthcare provider names and facility information - Insurance claim information and billing records - Appointment history and visit dates The exposure of this combination of data elements creates significant risk for identity theft, medical fraud, and unauthorized use of healthcare services.

Search All Breaches

Check other providers in our database

Request Your Medical Records

Verify accuracy after a breach

Data Source: All breach data is sourced from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) Breach Portal. Organization names are matched as reported; some entities may appear under different legal names.