HackingHealthcareHealthcareStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Health (basic)Financial accountMediumContained

Lake City Cancer Care LLC

bd_e9f877ef22027e38 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 11, 2025

Filed

Aug 15, 2025

To disclose

—

Affected

2state residents only

Linked

3 filings

Confidence

66%

Lake City Cancer Care LLC reported a data breach affecting 2 Nebraska residents. Unauthorized access occurred between March 31 and April 10, 2025, discovered on April 11, 2025. Patient records containing names, SSNs, and potentially PHI were accessed. Notifications began August 15, 2025, offering credit monitoring. Security protocols are being enhanced with third-party forensic assistance.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

Mar 31, 2025

Begins

Apr 11, 2025

Discovered

Aug 15, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_7b721499b8f66e532025-08-15Candidate
HHS OCRbd_a9ecbeadcb0fcd4c2025-06-27 · +49dCandidate

Name: Lake City Cancer Care LLC
norm: lake city cancer care
Domain: cancercenterlakecity.com

Name: Lake City Cancer Care LLC
norm: lake city cancer care
Domain: cancercenterlakecity.com
Industry: Healthcarellm

Discovered: Apr 11, 2025
Breach occurred: Mar 31, 2025 – Apr 10, 2025
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 15, 2025
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)Health (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Measures were taken immediately in response
A thorough investigation was conducted
Notification letters are being mailed
Notified individuals are being offered complimentary one-year memberships to credit monitoring services
A dedicated, toll-free incident response line has been established
Changes made: Existing security protocols are being enhanced
Additional security measures are being implemented with assistance from third-party forensic experts
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

HHS OCRJun 27 · first

HHS OCR+49d

Nebraska State AG+49d · this page

Pattern: first filing Jun 27 (FL), last Aug 15 (NE) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/a882a99d-bac4-4400-9e6f-a8f4aaa6a71d.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 15, 2025
Raw hash: 9183d99f468d948d9e78e9be3c3fa25a00dbc58ad750d40634ba582ba20222b1

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLake City Cancer Care LLC

Victim entityLake City Cancer Care LLC

Incidentdiscovered Apr 11, 2025

Stated responseMeasures were taken immediately in response

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov