Highlands Oncology Reports Massive Ransomware Breach Affecting Over 113,000 Patients Highlands Oncology Group, a U.S.-based healthcare provider, disclosed a ransomware attack that compromised the sensitive personal and medical data of 113,575 individuals. The breach, detected on June 2, 2025, was later traced back to unauthorized network access as early as January 21, 2025. The Medusa ransomware group claimed responsibility, demanding a $700,000 ransom and threatening to publish stolen data though it remains unclear whether the ransom was paid or if the data was leaked. The exposed information includes full names, dates of birth, Social Security numbers, financial account details, and medical records, raising significant privacy and identity theft risks. Highlands Oncology has offered 12 months of free identity protection services through Experian IdentityWorks Credit 3B, covering credit monitoring, identity restoration, and fraud insurance. Following the breach, the company implemented enhanced security measures, conducted a forensic investigation, and reported the incident to the U.S. Department of Health and Human Services’ Office for Civil Rights. Notification letters were mailed to affected individuals on August 1, 2025, in compliance with HIPAA and state data breach laws. While no legal action has been filed yet, the incident has drawn attention due to its scale and the sensitivity of the compromised data. Highlands Oncology is working with cybersecurity experts and law enforcement to contain the threat and assess the full extent of the compromise. The breach affects patients across multiple U.S. states. For inquiries, affected individuals can contact the company’s toll-free line at 877-250-2776.