Hematology Oncology Consultants Cancer Specialty Breach (2025): Patient SSN & Contact Records Exposed

About Hematology Oncology Consultants

Hematology Oncology Consultants is a U.S.-based private medical practice based in Michigan, specializing in hematology and oncology care for patients with blood disorders and cancer. The practice operates within a specialty-clinic model focused on outpatient cancer treatment, blood-disorder management, infusion services, and supporting care. As a HIPAA-regulated healthcare provider, the practice holds substantial volumes of protected health information including patient identity, contact, insurance, billing, diagnostic, and treatment records relating to cancer and hematological conditions. The patient base typically maintains long-term care relationships given the chronic nature of many oncology and hematology conditions.

Why They Hold Your Data

Oncology practices collect highly sensitive patient identity, insurance, billing, appointment, and cancer-treatment records across specialty care operations.

Recent Developments

Hematology Oncology Consultants was named on October 17, 2025 as a victim of the Rhysida ransomware operation, which listed the practice on its dark-web leak site. The breach was independently reported by dark-web monitoring services and breach-tracking aggregators. U.S. plaintiff law firms began organizing class-action investigations following the December 15, 2025 surfacing of the data on dark-web monitoring sites. The practice has not publicly released a detailed statement characterising the incident as of this writing. The Rhysida group has been active in healthcare-sector ransomware throughout 2025 and 2026, with multiple specialty-clinic and hospital victims.

Data Points Exposed

Breach Impact

The institutional impact on Hematology Oncology Consultants is meaningful given the small size of the practice relative to the breach's scope. Federal HIPAA notification obligations, state attorney-general filings, and active U.S. plaintiff class-action investigations create a substantial compliance and litigation pipeline. Comparable oncology breaches such as the South Texas Oncology and Hematology incident, which settled for $1.075 million, suggest the likely cost trajectory for cancer-care practices facing similar lawsuits. Operationally, the practice continues to provide patient care. Reputational exposure is concentrated within the Michigan oncology market and within the broader specialty-care community where breach handling has become a procurement filter for referring providers and insurers.

Exploitation & Downstream Threats

• Identity theft and synthetic identity construction using government-issued IDs | • SIM swap attacks where phone numbers are present | • Targeted phishing campaigns using exposed email addresses | • Doxxing risk from physical address exposure

What You Should Do

1. Freeze credit at all three bureaus and monitor for new-account and tax-refund fraud.
2. Treat the home address as exposed: review mail and package handling and physical-security routines, and brief household staff to verify unusual requests.
3. Guard against SIM-swap and vishing: add a carrier port-out PIN and verify any 'support' calls independently.
4. Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.

How ObscureIQ Can Help

1. Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
2. Exposure mapping and footprint neutralization: cross-reference against broker-available data and suppress still-removable elements, prioritizing address and phone, since this record re-seeds broker networks.
3. ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).