Memorial Radiation Oncology Medical Group Data Breach Lawsuit Investigation
Were you recently notified that your cancer-care records were hacked? The Memorial Radiation Oncology Medical Group data breach exposed highly sensitive personal and medical information, putting patients at serious risk of identity theft and fraud. Act now to protect yourself and see whether you can file a compensation claim.
Download Breach Notice (PDF)What Happened?
On June 13, 2025, Memorial Radiation Oncology Medical Group (“MRO”) learned from its administrative services provider, Integrated Oncology Network (ION), that an email phishing attack had compromised employee Outlook and SharePoint accounts. The unauthorized access spanned just three days—December 13 through 16, 2024—but was enough time for cyber-intruders to download confidential patient files.
MRO reported the incident to the California Attorney General on July 15, 2025, and has begun mailing notification letters to all known victims. The total number of impacted patients has not yet been disclosed.
What Information Was Exposed?
The breach involved both personally identifiable information (PII) and protected health information (PHI), including:
- Full names & addresses
- Dates of birth
- Social Security numbers
- Government-issued ID numbers
- Financial account details
- Diagnosis & treatment information
- Lab results, medications, and provider names
- Health insurance and claims data
- Dates of treatment
Who Is Memorial Radiation Oncology Medical Group?
Headquartered in Southern California with clinics in Long Beach, Fountain Valley, and Laguna Hills, Memorial Radiation Oncology Medical Group provides advanced radiation therapy services to cancer patients. The practice partners with ION for administrative support, which is why the phishing attack on ION’s systems affected MRO patient records.
Steps to Protect Yourself Right Now
If you received a breach notice from MRO or ION, experts recommend taking the following precautions immediately:
- Enroll in free credit monitoring. MRO is offering credit and identity monitoring through Epiq Privacy Solutions ID.
- Check your credit reports. Look for unfamiliar accounts or hard inquiries and dispute anything suspicious.
- Place a fraud alert or credit freeze. This makes it harder for thieves to open new lines of credit in your name.
- Monitor medical insurance statements. Watch for unrecognized services or claims.
- Remain vigilant against phishing. Be wary of unsolicited calls, emails, or texts that request personal information.
Do You Have a Legal Claim?
Under state and federal privacy laws, healthcare providers must secure patient data. When they fail, victims may pursue compensation for:
- Out-of-pocket expenses (credit fees, phone calls, mailings)
- Time spent mitigating identity theft
- Emotional distress
- Potential future losses linked to the breach
Data breach class actions often move quickly, and strict filing deadlines can apply. Consult an experienced data-privacy attorney to maximize your chances of recovery.
Key Dates
- Dec 13–16, 2024: Unauthorized access occurred.
- Jun 13, 2025: Breach discovered and disclosed to MRO.
- Jul 15, 2025: Report filed with the California Attorney General; patient notifications began.
Memorial Radiation Oncology Medical Group Data Breach FAQ
- How did the Memorial Radiation Oncology Medical Group data breach happen?
- A sophisticated phishing email tricked ION employees into revealing credentials, allowing attackers to infiltrate Outlook and SharePoint accounts that stored patient data.
- Was my Social Security number exposed in the Memorial Radiation Oncology Medical Group breach?
- Yes. MRO has confirmed that Social Security numbers were among the data categories accessed by unauthorized parties.
- What is MRO doing to prevent another breach?
- The practice reports implementing additional email security protocols, multi-factor authentication, and enhanced employee cybersecurity training.
- Can I sue Memorial Radiation Oncology Medical Group for the data breach?
- You may be able to participate in a class action or individual lawsuit seeking damages for losses related to the incident. Contact a qualified data-privacy lawyer to evaluate your eligibility.
- How long do I have to file a claim related to the Memorial Radiation Oncology Medical Group breach?
- Legal deadlines vary by state, but many statutes of limitations for privacy claims range from one to four years from the date you discovered the harm. Prompt action is recommended.
Next Steps
Protecting your identity is priority one—but you also have the right to pursue accountability. Gather your breach notice, keep records of any expenses or strange activity, and speak with a data-breach attorney about joining the lawsuit investigation.
Need personalized guidance? An experienced professional can help you navigate credit monitoring, fraud alerts, and potential legal claims arising from the Memorial Radiation Oncology Medical Group data breach.