2025–2026 Hematology Oncology Consultants (MI) — likely PHI exfiltration; Rhysida claims in press
Data compromised
Names, medical records and related PHI, insurance information, Social Security numbers (per HIPAA Journal summary)
Technical writeup
HIPAA Journal summarized unauthorized activity impacting Hematology Oncology Consultants in Michigan with discovery tied to September 20, 2025, later confirmation (~February 12, 2026) that PHI likely left the environment, forensic file review wrapping April 7, 2026, and patient notifications mailed from April 24, 2026. Reporting cited the Rhysida ransomware group claiming credit and alleging partial resale or leaks. Regulatory tallies could appear later on OCR dashboards.
Root cause
Unauthorized network/intrusion activity with plausible ransomware-style data theft (investigation narratives vary by outlet)