Orange County Radiation Oncology Reports 1,911 Affected

Published
July 17, 2025
Updated
July 17, 2025
Orange County Radiation Oncology Reports 1,911 Affected
Orange County Radiation Oncology
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Orange County Radiation Oncology

data breach?

Join the Lawsuit

It's free to join. 

Orange County Radiation Oncology Medical Group experienced a data breach affecting multiple locations and tens of thousands of patients. The cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI).

The breach occurred over a three-day period, from Dec. 13 to Dec. 16, 2024, due to an email phishing attack that resulted in unauthorized access of Integrated Oncology Network (ION) employee email and SharePoint accounts. Compromised information includes Social Security numbers, names, addresses, dates of birth, financial account information, diagnosis, lab results, medication, treatment information, health insurance and claims information, provider names, and dates of treatment.

Orange County Radiation Oncology Medical Group disclosed the cybersecurity incident to the U.S. Department of Health and Human Services on June 27, 2025. The company also began notifying affected individuals by mail on the same date and published a Notice of Email Phishing Incident on its own website.

The data breach was also reported to the California Attorney General's office on July 15, 2025. At least 1,911 patients were impacted by the incident.

Orange County Radiation Oncology Medical Group's response

In addition to required disclosures, affected patients can receive free Epiq Privacy Solutions ID credit monitoring services.

If you receive a data breach notice from Orange County Radiation Oncology Medical Group or Integrated Oncology Network about, you may want to:

  • Carefully review any notice or communication you receive and sign up for free Epiq Privacy Solutions ID credit monitoring offered.
  • Monitor financial accounts and credit reports for signs of identity theft.
  • Consider placing fraud alerts or credit freezes with major credit bureaus.
  • Be cautious of unsolicited emails or phone calls requesting personal information.

More information about their services and approach can be found on the Orange County Radiation Oncology Medical Group website.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
Date of Breach
December 16, 2024
Breach Discovered Date
2023-05-09
Total People Affected
Information Types Exposed
  • Social Security numbers
  • addresses
  • dates of birth
  • dates of treatment
  • diagnosis
  • financial account information
  • health insurance and claims information
  • lab results
  • medication
  • name
  • provider names
  • treatment information
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image