Minnesota Epilepsy Group Data Breach Lawsuit Investigation
Were you treated by Minnesota Epilepsy Group and just learned your personal data may be in the wrong hands? A February 2025 cyber-attack exposed highly sensitive patient information—act now to protect your identity and explore your legal options.
What Happened?
On February 27, 2025, Minnesota Epilepsy Group (MEG) detected unauthorized activity inside its network, prompting an immediate shutdown of affected systems and an outside forensic investigation. The probe confirmed that both personally identifiable information (PII) and protected health information (PHI) were accessed without authorization. A formal Notice of Data Security Incident was published on April 25, 2025.
What Information Was Exposed?
The compromised files may include:
- Full names and addresses
- Social Security numbers
- Dates of birth and other government IDs
- Medical record numbers
- EEG summaries & neuropsychology reports
- Medication records & treatment details
- Health insurance information
- Financial or billing data
Who Is Minnesota Epilepsy Group?
Founded in 1991, MEG operates the Midwest’s largest Level 4 epilepsy center, providing comprehensive adult and pediatric neurological care. Its multidisciplinary team includes neurologists, neurosurgeons, neuropsychologists, nurses and therapists.
Immediate Steps to Protect Yourself
If you received a breach notice—or suspect you are affected—take the following precautions right away:
- Enroll in credit monitoring: MEG is offering complimentary services; sign up promptly.
- Review account statements: Watch for unfamiliar charges or medical claims.
- Place a fraud alert or credit freeze: Contact any major credit bureau to make new account creation harder.
- Update online passwords: Use strong, unique credentials and enable multi-factor authentication where possible.
- Watch for phishing attempts: Verify emails or calls claiming to be from MEG or insurers.
Do You Have a Legal Claim?
Victims of data breaches frequently recover money for:
- Out-of-pocket expenses (credit monitoring, identity restoration, postage, etc.)
- Time spent mitigating fraud or securing accounts
- Emotional distress and loss of privacy
Class-action and individual lawsuits are being evaluated now. Eligibility often hinges on whether your data was included in the stolen files and what damages you suffered. Document any suspicious activity and keep copies of all correspondence from MEG.
Key Dates
- Feb 27 2025: Breach detected, systems secured.
- Apr 25 2025: Public Notice of Data Security Incident posted.
- Within 60 days of notice: Written notifications mailed directly to affected patients.
Need the Official Notice?
Download Official Breach Notice (PDF)Frequently Asked Questions
How many patients were impacted by the Minnesota Epilepsy Group data breach?
MEG has not yet disclosed the total number of affected individuals, but the figure is expected to be in the thousands based on the size of its patient population.
What type of compensation can Minnesota Epilepsy Group victims pursue?
Compensation may include reimbursement for financial losses, credit-monitoring costs, time spent resolving identity theft, and damages for emotional distress or loss of privacy.
Does the Minnesota Epilepsy Group offer free credit monitoring?
Yes. The company states that complimentary credit monitoring and identity-protection services will be provided to eligible patients. Follow the enrollment instructions in your mailed notice.
Is my medical treatment affected?
Your medical care and history remain intact; the breach involved electronic copies of information, not physical records. Continue normal treatment, but alert your providers to any fraudulent use of your insurance.
How do I place a fraud alert after the Minnesota Epilepsy Group data breach?
Contact any one of the three major credit bureaus—Experian, Equifax, or TransUnion—to file a free, one-year fraud alert. The bureau you contact must notify the others on your behalf.
Where can I get more help?
MEG has set up a dedicated response line at 855-260-0830 (Monday–Friday, 9 a.m.–9 p.m ET). Legal professionals and identity-theft counselors can also guide you through next steps.