Healthcare Highways Data Breach: PHI and PII Exposed

Healthcare Highways, a medical provider network company based in Frisco, Texas, disclosed a data breach involving unauthorized access to its computer network.

An unauthorized user accessed and copied certain information stored on the company's systems between July 22, 2026, and July 27, 2026. Healthcare Highways later identified the intrusion after detecting suspicious activity in its network.

On Aug. 4, 2026, a ransomware group known as Chaos claimed responsibility for the attack on a dark web site hosted on the Tor network. The dark web posting appeared on the same day the company first detected the suspicious activity. The group stated that it had obtained 235 GB of Healthcare Highways' data and intended to publish the stolen information within 24 hours.

The types of personally identifiable information (PII) confirmed to have been potentially exposed in the breach include names, addresses, dates of birth, Social Security numbers, driver's license numbers and financial information such as account numbers or credit and debit card numbers.

The types of protected health information (PHI) confirmed to have been potentially exposed in the breach include dates of service, patient ID numbers, procedure codes, procedure costs, procedure and provider information, diagnoses, health insurance information, claim information and information related to the payment of healthcare services.

Healthcare Highways reported the breach to the Texas Attorney General. The company discovered the incident on Aug. 4, 2026, and posted a notice of the data event on its website on Oct. 2, 2026.

Healthcare Highways' response to the breach

Healthcare Highways encouraged individuals to remain vigilant against incidents of identity theft and fraud by reviewing their account statements and explanation of benefits and by monitoring their free credit reports for suspicious activity.

Healthcare Highways also directed individuals to additional resources for learning more about identity theft protection, including the three major consumer reporting agencies, the Federal Trade Commission and state attorneys general offices.

People with questions about the breach can call the company toll-free at 866-945-2292, send an email to compliance@healthcarehighways.com, or write to Healthcare Highways LLC at One Cowboys Way, Suite 290, Frisco, Texas 75034.