The 2025 Interventional Pain Center data breach was a cyber incident involving unauthorized access to an organization email account. According to the official notice, the account was accessible to an unauthorized individual between December 1 and December 11, 2025.
The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/information-technology incident involving email and reported 3,171 affected individuals.
Verified Incident TimelineInterventional Pain Center identified the unauthorized access on or about December 11, 2025, secured the account, and began an investigation with cybersecurity professionals. Around March 6, 2026, the organization determined that personal information was present in the account, and it completed its detailed content review on March 17.
What Information May Have Been Affected?The information may vary by person. The official notice lists names, Social Security numbers, addresses, ZIP codes, driver's-license numbers, dates of birth, medical histories, diagnoses, conditions, treatment and prescription information, treating physicians, health-insurance information, and subscriber numbers.
How the Organization RespondedThe organization says it secured the affected account, conducted a forensic investigation, reviewed the email content to identify relevant individuals, and enhanced email-security and monitoring controls. It also provided additional personnel training. The official notice says there was no evidence that the information had been misused at that time.
What Should Affected People Do?Notice recipients should monitor financial-account activity, credit reports, health-insurance claims, and explanation-of-benefits statements for an unfamiliar transaction or service. People whose Social Security or driver's-license information was affected may consider a free fraud alert or credit freeze based on their circumstances.