On June 4, 2025, North Oaks Health System detected unauthorized access to certain employee email accounts, exposing sensitive data between May 28 and June 5, 2025. The breach compromised the personal and protected health information (PHI) of 6,243 individuals, including names, addresses, dates of birth, Social Security numbers, health insurance details, and medical records. The incident was reported to the U.S. Department of Health and Human Services (HHS) on September 2, 2025, and affected patients were notified via mail. The breach originated from a phishing or email account takeover attack, leading to the exposure of highly sensitive patient data. North Oaks secured its systems, involved law enforcement, and established a dedicated call center for victim support. The compromised data poses significant risks of identity theft, financial fraud, and medical record misuse, with long-term reputational and operational consequences for the healthcare provider.