Highlands Oncology Group reports hacking breach affecting 111,766 patients
Highlands Oncology Group PA, an oncology practice in Arkansas, filed a breach report with HHS OCR on August 1, 2025. The filing covers a hacking/IT incident involving data stored on a network server. The breach potentially affected 111,766 individuals. As a healthcare provider, this entity is a Covered Entity under HIPAA. Administrators should note the scale of this incident for risk assessment purposes. The submission date is when the report was filed, not necessarily when the breach occurred or was discovered. No further details were provided in the initial filing.
Sources differ:
- The HHS OCR breach portal lists 111,766 individuals; HIPAA Journal and other secondary outlets report about 113,500 to 113,575 affected individuals.
Primary source: HHS OCR Breach Portal — Highlands Oncology Group PA (AR) · reported 08/01/2025 · 111,766 individuals · Checked against the record 2026-10-03