Highlands Oncology Group PA

Highlands Oncology Group PA (“Highlands Oncology”) based in Springdale, Arkansas, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-06-02 and reported on 2025-08-04. 504 Texas residents were affected. 113,575 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Highlands Oncology Group PA reported to HHS on 2025-08-01 a Hacking/IT Incident affecting 111,766 individuals. Breached information located on Network Server.

Highlands Oncology Group PA reported a ransomware attack discovered on June 2, 2025, affecting 5 New Hampshire residents. The attacker exploited a vendor application vulnerability between Jan 21 and June 2, 2025, encrypting files and potentially exfiltrating PHI, SSNs, and financial data. Highlands engaged forensic experts, notified law enforcement, and offered 12 months of credit monitoring.

Highlands Oncology Group PA, a healthcare provider based in Springdale, AR, discovered on June 2, 2025 that it had been the victim of a cyber-attack in which an unauthorized third party accessed its network between January 21, 2025 and June 2, 2025, encrypting files and potentially exfiltrating personal and health information. Total affected individuals: 113,575 nationwide; 6 Maine residents. Experian IdentityWorks Credit 3B (12 months) offered to affected individuals.

Highlands Oncology Group PA reported a data breach to the Montana Attorney General. The breach was reported on 2023-12-29. The breach occurred from 9/25/2023 to 9/26/2023. 7 Montana residents were affected.