Data breach at Integrated Oncology Network exposes patient information of cCARE cancer patients
Learn More
Integrated Oncology Network (ION), a group of oncology and urology practices, is reporting a data breach that compromised sensitive patient information belonging to individuals receiving care at cCARE (California Cancer Associates for Research & Excellence).
The data breach was caused by a email phishing incident that successfully compromised ION's network security, allowing unauthorized parties to gain access to a number of email and SharePoint accounts containing sensitive patient information. The attackers had access to the data between December 13 and December 16, 2024.
Exposed data includes:
- Names in combination with addresses
- Dates of birth
- Social Security numbers (for a small number of individuals)
- Financial account information
- Medical diagnoses
- Laboratory test results
- Medication information
- Treatment information and details
- Health insurance and claims information
- Healthcare provider names
- Dates of treatment and medical services
The number of affected individuals has not been disclosed.
ION started notifying affected oncology physician practices, including cCARE, on June 13, 2025. The organization filed an official notice with the California Attorney General on June 27, 2025, and began mailing individual breach notification letters to affected patients.
ION has established a dedicated helpline for affected individuals, available at 855-361-0308, operating Monday through Friday between 8:00 a.m. and 8:00 p.m. Central Time, excluding major U.S. holidays. The organization encourages patients who believe their information may have been involved in the incident to contact this helpline with questions or concerns.
As a precautionary measure, ION recommends that potentially affected individuals carefully review statements they receive from their healthcare providers and health insurance plans. Patients are advised to contact their provider or health plan immediately if they notice any services listed that they did not receive, as this could indicate fraudulent use of their compromised information.
