Highlands Oncology Group Data Breach Lawsuit Investigation
File Your Claim Now

Dapeer Law, P.A., a top-rated class action law firm, is investigating the Highlands Oncology Group data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

Highlands Oncology Group Data Breach Lawsuit Investigation

Were you one of the 113,575 patients notified that your sensitive information was exposed at Highlands Oncology? Time is limited—find out how to protect yourself and see if you qualify for financial compensation.

Act now: review the facts below, safeguard your identity, and learn how to join a potential class-action lawsuit.

Quick Facts About the Highlands Oncology Breach

  • Breach discovered: June 2, 2025
  • Intrusion window: January 21 – June 2, 2025
  • Individuals affected: 113,575
  • Threat actor: Medusa ransomware gang (claimed)
  • Notice mailed: August 1, 2025

What Information Was Stolen?

The investigation found the attacker could have viewed or exfiltrated the following data:

  • Name
  • Date of birth
  • Social Security number
  • Driver’s license or state ID number
  • Passport number
  • Financial account or credit/debit card numbers
  • Medical record and patient account numbers
  • Medical treatment and health-insurance information
Download Official Breach Notice (PDF)

How Did the Breach Happen?

An unauthorized actor infiltrated Highlands Oncology’s network and deployed ransomware that encrypted files and systems. While systems were locked, investigators determined the attacker also accessed folders containing patient data. The Medusa ransomware gang later took credit for the attack and threatened to post stolen files if a ransom was not paid.

Your Legal Options

Victims of medical-data breaches frequently pursue class-action lawsuits seeking reimbursement for:

  • Identity-theft monitoring and credit-freeze fees
  • Fraudulent charges or loan applications in their name
  • Time spent securing accounts
  • Loss of privacy and emotional distress

If Highlands Oncology failed to use reasonable cybersecurity safeguards, it may be liable for these damages. By joining a lawsuit, you could receive monetary relief and push the provider to improve security practices.

Five Immediate Steps to Protect Yourself

  1. Enroll in free credit monitoring—details are in your mailed notice.
  2. Place a fraud alert with Equifax, Experian, or TransUnion.
  3. Review Explanation of Benefits (EOB) statements for unfamiliar services.
  4. Change online passwords—enable multi-factor authentication where available.
  5. Monitor bank and insurance accounts for unusual activity and report any discrepancies immediately.

About Highlands Oncology Group

Highlands Oncology Group, P.A. offers radiation therapy, chemotherapy, and surgical oncology across four Arkansas locations: Rogers, Fayetteville, Springdale, and Mountain Home.

FAQ – Highlands Oncology Group Data Breach

Was my Social Security number exposed in the Highlands Oncology breach?

Yes, Highlands Oncology confirmed that Social Security numbers were among the data potentially accessed by the attacker.

When did Highlands Oncology start notifying patients?

Notification letters began mailing on August 1, 2025.

Do I have to pay to join a Highlands Oncology data breach lawsuit?

No. Reputable class-action firms advance all costs and only collect fees if the case succeeds.

What compensation could I receive?

Settlements often cover out-of-pocket expenses, credit-monitoring costs, time spent mitigating fraud, and in some cases cash payments for privacy violations.

How long do I have to take legal action?

Each state sets its own statute of limitations for privacy claims. Contact an attorney quickly to avoid missing critical deadlines.

Is Highlands Oncology offering free credit monitoring?

Yes, the provider is offering complimentary credit-monitoring services. Details are included in the mailed breach notice.

Still have questions? Reach out to a qualified data-breach attorney to discuss your specific situation.

Attorney Advertising. Prior results do not guarantee a similar outcome.

File Your Claim Now