Lake City Cancer Care, an oncology medical practice based in Florida, experienced a data breach that affected 15,142 patients. On May 9, 2025, Integrated Oncology Network (ION), a company that provides administrative services to Lake City, determined unauthorized actors accessed certain email accounts and SharePoint files between December 13, 2024 and December 16, 2024.
The breach exposed a both personally identifiable information (PII) and protected health information (PHI), including names, addresses, dates of birth, Social Security numbers, financial account details, diagnosis information, lab results, medication details, treatment information, health insurance and claims data, provider names and dates of treatment.
Lake City Cancer Care disclosed the data breach to the U.S. Department of Health and Human Services on June 27, 2025. The information compromised in this breach could be used for identity theft, financial fraud or to gain unauthorized access to medical services.
If you receive a data breach notice from Lake City Cancer Care or Integrated Oncology Network about, you may want to:
For more details about their medical services, visit the Cancer Center at Lake City website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.