Mc&B Investigating Highlands Oncology Breach

McShane & Brady, a Kansas City law firm representing individuals whose personal and private information has been breached by unauthorized access, is investigating a data breach from Arkansas based healthcare provider Highlands Oncology Group.

Highlands Oncology Group has disclosed a ransomware attack that compromised sensitive personal and medical data belonging to over 113,000 individuals from multiple states.

According to a notice of data incident report on Highlands Oncology Group’s website, “On June 2, 2025, Highlands discovered it was the victim of a cyber-attack, and certain Highlands files and systems were inaccessible. The forensic investigation determined that an unauthorized third party accessed Highlands’ computer network at times between January 21, 2025, and June 2, 2025, and encrypted some of its files. The investigation also determined that the third party may have accessed and acquired certain files from Highlands’ systems during this period.”

On August 1, 2025, Highlands began mailing notification letters to those individuals whose information was in the files for whom Highlands has a valid mailing address.

The personal information disclosed may include name, date of birth, Social Security number, driver’s license/state identification number, passport number, credit/debit card number, financial account number, medical treatment information, medical record number, patient account number, and/or health insurance policy information.

From hospitals, healthcare providers, government services, service providers to insurance companies, proper precautions and training have not been made to secure these records. Once public, your information is out there for everyone to see.  McShane & Brady is the leading firm representing those who have been affected by a data breach.

If you have been affected by this breach, please call McShane & Brady at 816-888-8010 to discuss your legal options.