2016 — 21st Century Oncology: Oct 2015 (disclosed Mar 2016), 2.2M records
Data compromised
Names, SSNs, insurance, diagnosis, treatment, physician names
Technical writeup
Oct 2015 (disclosed Mar 2016). Unauthorized access to patient database at Fort Myers cancer care provider (145 centers). Exposed: names, SSNs, insurance data, diagnosis/treatment info, physician names. FBI notified Nov 2015; delayed disclosure for investigation. Affected all 50 states and several countries. One year credit monitoring offered.
Root cause
Unauthorized database access.