Phishing Attack Affects Multiple Cancer Treatment Centers

Posted By Steve Alder on Jul 8, 2025

A phishing attack has affected multiple cancer care providers that are part of the Integrated Oncology Network (ION). All affected entities have issued similar breach notices about the incident, which involved unauthorized access to a small number of employee email and SharePoint accounts in what was described as “a sophisticated phishing attack.”

Immediate action was taken to secure the affected accounts, and an investigation was launched to determine the nature of the attack and the extent of any data breach. The forensic investigation confirmed that the accounts were compromised over three days between December 13, 2024, and December 16, 2024. Some of the compromised accounts contained patient information. The review of the accounts confirmed that they contained names, addresses, dates of birth, financial account information, diagnoses, lab results, medications, treatment information, health insurance and claims information, provider names, dates of treatment, and Social Security numbers.

The affected cancer care providers have not found any evidence of misuse of patient information; however, as a precaution, the affected individuals have been offered complimentary credit monitoring, dark web monitoring, and identity restoration services. ION sent notification letters to the affected oncology physician practices on June 13, 2025, and individual notification letters started to be mailed to the affected patients on June 27, 2025. ION said the email accounts were most likely compromised to perpetrate a phishing scheme; however, SharePoint accounts were also accessed by the attacker(s). Additional cybersecurity training has been provided to the workforce to reduce the risk of similar incidents in the future.

Breach reports are starting to appear on the HHS’ Office for Civil Rights breach portal from the affected oncology physician practices. The list may grow over the coming days. This post will be updated when further victims have been confirmed.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Business Email *

Name *

First

Last

Number *

Company Name *

Get Free Checklist

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy