Hematology Oncology Consultants Data Breach

On or about February 12, 2026, it learned that certain files may have been acquired during the attack. It completed its review of individuals and addresses on April 7 and mailed notices on April 24, 2026.

HHS Office for Civil Rights and state filings report 62,972 potentially affected individuals. This is a regulatory affected-person total, not an imported-row, file, or confirmed accessed-record count. No person-level data has been imported locally, so the imported-record count is zero.

State notice material confirms that a name may have appeared with a Social Security number, medical information, and/or health insurance information, with scope varying by person. No listed field should be assumed present for everyone, and neither acquisition of every file nor misuse is established. The organization said it was not aware of misuse as of the notice.

The incident alone does not establish that anyone was a patient, received hematology or oncology care, was a family member, or had a particular insurance relationship. Health and identity associations must remain private. Monitoring offered to direct notice recipients whose Social security numbers were involved should be evaluated under the terms and enrollment window in the April 24 letter.