Madison Healthcare Services Suffers Data Breach, Exposing Sensitive Patient Information Between July and August 2025, Madison Healthcare Services, a Minnesota-based healthcare provider, fell victim to a data breach that compromised the personal information of individuals in its database. The incident came to light on September 23, 2025, when the threat actor Worldleaks claimed responsibility and posted details on the Tor network, signaling a dark web leak. The breach was formally disclosed to the U.S. Department of Health and Human Services (HHS) on December 2, 2025, with an initial report indicating 500 affected individuals. While the exact types of exposed data remain unspecified, healthcare breaches of this nature typically include sensitive details such as names, addresses, dates of birth, Social Security numbers, medical record numbers, health insurance information, and clinical records. The severity of the breach is amplified by the attackers’ public claim of leaking the data, raising concerns over potential identity theft and fraud for those impacted. Madison Healthcare Services launched an internal investigation following the discovery and has since notified affected individuals. The organization’s consumer notice outlined the incident and provided guidance for those whose information may have been exposed. The incident underscores the growing threat of dark web-driven data leaks in the healthcare sector, where stolen information can be exploited for malicious purposes.