Highlands Oncology Data Breach: Lawsuit Investigation
Attorneys affiliated with ClassAction.org are currently investigating the potential for a class action lawsuit in response to the Highlands Oncology data breach. This inquiry focuses on gathering information from individuals who have received notifications indicating that their personal data was compromised.
Overview of the Highlands Oncology Security Incident
Highlands Oncology Group PA has publicly disclosed a data breach that affects the personal information of numerous individuals. On June 2, 2025, the organization identified a cyberattack that rendered certain files and systems unavailable. Following this discovery, an investigation into the Highlands Oncology data breach was initiated, and it is estimated to impact approximately 113,575 individuals.
The investigation established that an unauthorized actor accessed Highlands Oncology’s network from January 21 to June 2, 2025, encrypting various files and potentially exfiltrating sensitive data. Reports indicate that the Medusa ransomware group has claimed responsibility for this breach through various channels.
Compromised data may include sensitive details such as names, dates of birth, Social Security numbers, driver’s license or state ID numbers, passport numbers, financial records, medical treatment details, and health insurance information. Commencing August 1, 2025, Highlands Oncology began notifying affected individuals via postal mail, wherever feasible.
Highlands Oncology Group, which specializes in radiation therapy and chemotherapy, operates in several locations across Arkansas, including Rogers, Fayetteville, Springdale, and Mountain Home.
Steps Individuals Affected by the Highlands Oncology Data Breach Can Take
If you believe your information has been compromised in this data breach, attorneys are eager to hear from you. You may have the opportunity to initiate a class action lawsuit to seek compensation for privacy violations, time spent addressing the breach, incurred expenses, and other losses.
A successful legal action could compel Highlands Oncology to implement additional safeguards to protect the sensitive data it handles.
Have you received a notification regarding the Highlands Oncology data breach? Complete the form on this page today.
Details of the Highlands Oncology Data Breach
Data exposed:
• Social Security Number
• Date of Birth
• Financial Account Number
• Credit/Debit Card Number
• Medical Record Number
• Passport Number
• Health Insurance Policy Information
• Patient Account Number
• Name
• Medical Treatment Information
• Driver’s License/State ID Number
Take Action
If you have received a notification about the Highlands Oncology data breach, complete the form on this page to contact us.
An attorney or legal representative may reach out to you to provide more details about this investigation and to ask pertinent questions.
It is important to note that contacting us incurs no cost, and you are not obligated to take any action following that conversation.
Published: August 4, 2025
