MPOWERHealth, a Texas-based healthcare company specializing in clinical support for neuromusculoskeletal and orthopedic practices, suffered a major data breach on August 19, 2025, orchestrated by the hacking group Worldleaks. The attackers infiltrated the company’s systems, exfiltrated sensitive data, and leaked it on a dark web forum via the Tor network. The compromised data reportedly includes personally identifiable information (PII) and protected health information (PHI) of over 55,000 patients and employees, such as names, contact details, dates of birth, Social Security numbers, health insurance records, medical histories, and billing/payment information. Worldleaks made the stolen data available for download, exposing affected individuals to identity theft, financial fraud, and further cybercriminal exploitation. MPOWERHealth has yet to issue an official public statement but is expected to conduct internal reviews and comply with state/federal disclosure requirements. The breach poses severe risks to patient privacy, regulatory compliance (e.g., HIPAA violations), and the company’s reputation, with potential long-term financial and operational repercussions.