e+ Oncologics Louisiana, LLC experienced a data breach that affected 8,270 individuals in the United States. The breach occurred over a three-day period between Dec. 13, 2024, and Dec. 16, 2024, when an unauthorized party gained access to sensitive information through an email phishing incident.
The breach exposed a both personally identifiable information (PII) and protected health information (PHI), including names, addresses, dates of birth, Social Security numbers, financial account details, diagnosis information, lab results, medication details, treatment information, health insurance and claims data, provider names and dates of treatment.
On May 9, 2025, Integrated Oncology Network (ION), a company that owns and provides administrative services to e+ Oncologics Louisiana, determined unauthorized actors accessed certain email accounts and SharePoint files. The cybersecurity incident involved several oncology practices and thousands of patients.
Oncologics disclosed the data breach to the U.S. Department of Health and Human Services on June 27, 2025 and and published the ION Notice of Email Phishing Incident on its own website. Affected patients were notified by mail beginning on June 27, 2025.
The information compromised in this breach could be used for identity theft, financial fraud or to gain unauthorized access to medical services.
In additional to requires state and federal disclosures, affected e+ Oncologics Louisiana patients have been notified.
If you receive a data breach notice from e+ Oncologics Louisiana or Integrated Oncology Network about, you may want to:
For more information about the organization and its services, visit the e+ Oncologics Louisiana, LLC website.