Multiple US Cancer Centers

Bad actors are often aimed at medical care organizations because they generally lack strong cybersecurity defenses. In addition to that, the data they store are very valuable, and medical care companies are often willing to pay great sums to recover them. The last attack has impacted multiple cancer centers in the United States.

A coordinated phishing campaign has breached confidential data of patients in several cancer care suppliers affiliated with the Integrated Oncology Network (Ion), a network of Oncology practices based in Tennessee.

Register for my free Cyberguy report
Get my best technological tips, urgent security alerts and exclusive offers delivered directly to your inbox. In addition, you will get instant access to my definitive scam survival guide, free when it joins me Cyberguy.com/newsletter

What you need to know about cancer care violation

The violation, which occurred for a period of three days between December 13 and 16, 2024, allowed the attackers to access the email of the employees and the SharePoint accounts, according to notices presented before the state regulators and the Department of Health and Human Services of the United States.

National Security experts raise concerns after the Microsoft program exposed as a possible way for Chinese espionage

Committed accounts contained protected health information, including names, addresses, birth dates, diagnoses, laboratory results, treatment details, medicines, insurance information and, in some cases, social security numbers and financial data. While Ion says that there is no current evidence of misuse, the company has offered the affected people of free credit monitoring, dark web monitoring and identity theft protection services.

Failure notifications were sent to the practices impacted on June 13, 2025, and the patient’s cards began sending by mail on June 27.

Researchers say that the Phishing campaign was probably designed to collect data for use in broader fraud schemes. While SharePoint’s access was also compromised, the main approach seems to have been the collection of email based. Ion says that since then it has updated its cybersecurity protocols and has provided additional training to staff.

What practices are affected by violation

Until now, at least 11 practices have reported that it is affected by rape. The biggest includes:

• Rocky Mountain Oncology Care: 10,268 individuals
• E+ Louisian Oncologics, LLC: 8,270
• California Cancer Associates – Fresno: 7,670
• Radiation Mojave Oncology Medical Group: 4,403
• South Georgia Cancer Cancer Center: 4,108
• Tulsa pet images: 3,159
• Acadiana RadiotaPy, LLC: 2,219
• Northeast Dallas Pet Images: 1,935

Other affected practices include image and radiation centers in Texas, Louisiana and North Florida. In total, more than 130,000 people have been affected so far. The violation now appears in the Civil Rights breach portal of HHS, which tracks the exhibitions to the medical care data that involves more than 500 people.

What is artificial intelligence (AI)?

We communicate with the Integrated Oncology Network, which we now operate within the Cardinal Health Navistal Oncology Alliance, for comments, but did not receive an answer before our deadline.

6 ways to protect themselves from cancer care violation

Phishing’s recent attack on ion cancer centers presented confidential information from the patient, including contact data, medical records and even social security numbers in some cases. If you are affected or simply want to keep a step forward, these actions can help minimize your risk.

1) Do not click suspicious attachments or files and use strong antivirus software

The violation of ion data provides the attackers access to their contact data, which they can use badly. Avoid clicking emails or unexpected messages, even if they look legitimate. The best way to safeguard the malicious links that install malware, which potentially access their private information, is to have strong antivirus software installed on all its devices. This protection can also alert it to the PHISHING Electronic Correos and Ransomware scams, maintaining their personal information and their safe digital assets.

Get my elections for the best 2025 antivirus protection winners for their Windows, Mac, Android and iOS devices in Cyberguy.com/Lockupyoutech

2) Use a personal data elimination service

Since your contact data could have been exposed in ion violation, you are more vulnerable to spam, scams and target fraud. Consider using a personal data disposal service to scrub your name, email, telephone number and address of the data broker websites that sell your information.

Get the News business on the fly by clicking here

3) Use strong and unique passwords for each account

Password reuse increases your risk. A single filtered password can unlock several accounts. Use a password administrator to generate and store safe passwords.

Get more details about my best password administrators reviewed by experts of 2025 in Cyberguy.com/Passwords

4) Register for an identity theft protection service

ION offers free credit monitoring services and theft of free credit to those affected by the violation. But even if this specific violation did not affect you, it is still intelligent to protect. Identity theft protection services can alert it to suspicious activities, help you recover if your identity is stolen and often provide tools to freeze or block your credit. That prevents scammers from opening new accounts in their name, and can raise freezing temporarily when necessary.

See my advice and the best selections on how to protect yourself from identity theft in Cyberguy.com/ididentitytheft

5) Enable two factors’ authentication (2FA)

Add a second login protection layer as a text message or application based on 2fait can make it much more difficult for ion attackers to access their accounts, even if your password is exposed.

6) Monitor your financial and credit accounts

Be attentive to strange charges or unknown accounts. Configure alerts through your bank and check your credit report regularly to catch early fraud.

Click here to get the News application

Kurt key takeway

Phishing attacks remain a main cause of medical care data violations, often exploiting the gaps in email safety and employee awareness. While Ion acted quickly to contain the incident, the scope of the violation highlights how a single phishing campaign can expose tens of thousands of patient records in multiple systems and locations.

Do you think medical care providers are doing enough to protect patient data? Get us knowing in Cyberguy.com/contact

Register for my free Cyberguy report
Get my best technological tips, urgent security alerts and exclusive offers delivered directly to your inbox. In addition, you will get instant access to my definitive scam survival guide, free when it joins me Cyberguy.com/newsletter

Copyright 2025 Cyberguy.com. All rights reserved.