Highlands Oncology Group ransomware affects over 110,000 people
US cancer care provider Highlands Oncology Group discovered a ransomware attack in June 2025 and reported that 113,575 people were affected. An investigation found that the attackers had accessed its systems since January, and the Medusa group claimed to have stolen data. It subsequently became the subject of a law firm investigation into the leak of patient records.
Key facts
- Affected organisation
- Highlands Oncology Group
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- 113,575 people affected
- Cause / method
- Attacker access to systems and ransomware attack
- Location
- United States
If your data was exposed
Exposed dataHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It emerged that 113,575 people had been affected by the ransomware attack discovered in June.
- The law firm Schubert Jonckheer & Kolbe announced an investigation into the leak of patient records.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.