Cyberattack on NS Support Exposes PHI of Nearly 93,000 Patients NS Support LLC, a Boise, Idaho-based healthcare provider specializing in neurosurgical treatment, reported a data breach to the HHS Office for Civil Rights (OCR) on November 21, 2025, affecting 92,845 individuals. The incident stemmed from unauthorized network access detected on May 29, 2025, prompting an investigation with third-party digital forensics experts. The breach involved the exfiltration of files containing protected health information (PHI), including patients’ first and last names and transcribed medical notes from physician appointments. Social Security numbers and financial data were not compromised, and no misuse of the exposed information has been identified. Following the discovery, NS Support took immediate action, wiping and rebuilding affected systems while implementing additional security measures. The organization is also reviewing and updating its data security policies and network software to prevent future incidents. Notification letters were mailed to impacted individuals on November 21, 2025. Due to the nature of the exposed data, credit monitoring services were not offered, though patients were advised on precautionary steps, such as placing fraud alerts on their credit files.