Chickasaw Nation Health 2025 Data Breach (1.6 Thousand People Affected)

The 2025 Chickasaw Nation Health data breach involved an employee accessing emergency-department patient records at Chickasaw Nation Medical Center in Ada, Oklahoma without authorization. The organization says the access occurred from December 1, 2025, through April 22, 2026.

The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as an unauthorized access/disclosure incident involving electronic medical records and reported 1,607 affected individuals.

How Was the Incident Discovered?

Chickasaw Nation Department of Health identified on April 22, 2026 that an employee had accessed patient information without a valid business reason. A review of access logs found that the incident was limited to one employee acting in violation of organizational policy.

What Information Was Affected?

The information may have included names, ages, dates of service, tribal affiliations, reasons for visits, and clinical details such as laboratory and radiology orders. The organization says it found no evidence that full Social Security numbers were compromised.

How Did the Organization Respond?

The organization says it promptly investigated, stopped the unauthorized access, and identified people who may have been affected. Its official notice limits the incident to patients who visited the Chickasaw Nation Medical Center emergency department in Ada during the stated period.

What Should Affected People Do?

Notice recipients should review healthcare statements and insurance explanations of benefits for services or activity they do not recognize. People who want to determine whether they were affected should use the Privacy and Security Office contact details in the official notice on the Chickasaw Nation Health website.