FEDERALHackingSupply Chain (3P Vendor)Customer Data InvolvedPIILowContained
Oncology Institute, Inc.
bd_deda4b07d72f2020 · schema v1 · pii pii-v1
Full breach record for Oncology Institute, Inc. →The Company (a healthcare IT entity) disclosed a cybersecurity incident involving a third-party software provider on November 3, 2025. The incident caused a brief, immaterial delay in fee-for-service collections. No evidence of patient personal information compromise was found, though investigation is ongoing. Normal billing operations were restored.
SEC clockMateriality determined Nov 3, 2025 → Filed Mar 12, 2026129d ✗ SEC 4-day late18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1799191/000179919126000007/toi-20251231.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Mar 12, 2026
- Raw hash
- e5d66f434fe841a9fd2b291e3543daffc743beba43906edc1e98f64d2b88ac8e
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Oncology Institute, Inc.norm: oncology institute
- SEC CIK
- 1799191
Victim entity
- Name
- Oncology Institute, Inc.norm: oncology institute
- SEC CIK
- 1799191
Incident
- Discovered
- Nov 3, 2025
- Materiality determined
- Nov 3, 2025
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
Compliance
- Time to disclose
- 18 weeks(129 days from discovery to filing)
- Compliance flags
- SEC 4-day late · 129d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Nov 3, 2025→ Filed: Mar 12, 2026129d cal. 4 business days SEC 4-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.