On June 4, 2025, North Oaks Health System discovered suspicious activity within certain employee email accounts. An investigation was launched and revealed that an unauthorized actor gained access to some emails and attachments between May 28 and June 5, 2025.
The data breach affected the personal and protected health information of at least 6,243 individuals. Compromised data included names, addresses, dates of birth, Social Security numbers, health insurance information, and medical records relating to patient care at North Oaks.
North Oaks Health System disclosed the data breach to the U.S. Department of Health and Human Services on Sept. 2, 2025. The organization also published a Notice of Cybersecurity Incident on its website and is notifying impacted patients by mail.
Following the discovery of the breach, North Oaks Health System worked to secure its systems and notified law enforcement. The organization is notifying affected patients and has set up a dedicated call center at 866-559-4681, 8:00 am – 5:30 pm, Central Time, Monday through Friday.
If you believe your personal information may have been compromised in this breach:
For more information about the healthcare organization, visit the North Oaks Health System website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.