Medical Oncology Hematology Consultants, P.A.

Massachusetts Attorney General's office received a breach notification from Hematology Oncology Consultants (Ref: 2026-676). The source document provided is empty, containing no details regarding the incident type, data affected, or individuals impacted.

Hematology Oncology Consultants (HOC), a Michigan healthcare provider, notified the New Hampshire Attorney General of a data event affecting 2 NH residents. Unauthorized access occurred on the network around September 20, 2025, but was discovered on February 12, 2026. Affected data included names, SSNs, and PHI. HOC engaged cyber specialists, enhanced network security, and offered 12 months of credit monitoring.

Hematology Oncology Consultants reported to HHS on 2026-04-24 a Hacking/IT Incident affecting 62972 individuals. Breached information located on Network Server.

Hematology Oncology Consultants Michigan Hematology Oncology is a private practice dedicated to providing the highest level of quality care in a healing environment for the mind, body and spirit of patients dealing with cancer and blood disorders.

Hematology Oncology Consultants Michigan Hematology Oncology is a private practice dedicated to providing the highest level of quality care in a healing environment for the mind, body and spirit of patients dealing with cancer and blood disorders.

Medical Oncology Hematology Consultants, PA reported to HHS on 2019-04-26 that an employee was the victim of an email phishing scheme affecting 8,591 individuals. The breach involved protected health information (PHI) including names, Social Security numbers, financial data, and treatment details. The organization has since retrained staff on identifying fraudulent emails and implemented additional data safeguards.

Medical Oncology Hematology Consultants, PA (Delaware) reported to HHS on 2017-08-29 a ransomware attack that occurred on June 17, 2017, affecting 19,203 individuals' ePHI stored on desktop computers and a network server. Affected files included demographic and clinical information. The CE recovered all ePHI from a same-day backup. Remediation included third-party forensic review, email phishing testing, employee security training, web filtering, and two-factor authentication. No improper use or exfiltration of ePHI was identified. OCR confirmed corrective actions were implemented.