Highlands Oncology Group Under Investigation for Data Breach of Over 113,000 Patient Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to the sensitive information of over 113,575 patients of Highlands Oncology Group, an Arkansas-based outpatient cancer care provider. 

On June 2, 2025, Highlands Oncology Group discovered that an unauthorized third party had accessed its computer network at times between January 21, 2025, and June 2, 2025. Highlands Oncology Group notified the Office of the Maine Attorney General and affected individuals on August 1, 2025. The data breach is not currently listed on the United States Department of Health and Human Services’ breach portal.  

Although the breach began in January 2025, Highlands Oncology Group did not begin notifying affected individuals until on or around August 1, 2025, which may have violated state and federal laws. The following information may have been compromised in the breach: names, dates of birth, Social Security numbers, driver’s license/state identification numbers, passport numbers, credit/debit card numbers, financial account numbers, medical treatment information, medical record numbers, patient account numbers, and/or health insurance policy information.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to monetary damages and an injunction requiring changes to Highlands Oncology Group’s cybersecurity practices.

If you received notification of this data breach, or are a patient of Highlands Oncology Group and wish to obtain additional information about your legal rights, please fill out the form below.