Highlands Oncology Group Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Highlands Oncology Group PA data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Highlands Oncology Group PA
Highlands Oncology Group PA is a cancer care provider based in Northwest Arkansas. Founded in 1996, the organization operates multiple outpatient clinics and specialty centers, with primary locations in Fayetteville, Rogers, Springdale and Mountain Home, Arkansas.
Highlands Oncology Group PA employs around 350 healthcare professionals, including oncologists, surgeons, radiologists and support staff.
What was the Ransomware Attack?
On June 2, 2025, Highlands Oncology Group PA discovered it had fallen victim to a cyberattack. Certain files and systems became inaccessible, prompting the company to launch an internal investigation and engage a forensic security firm.
The investigation determined that an unauthorized third party accessed the company’s computer network between Jan. 21, 2025, and June 2, 2025. During this period, the attacker encrypted some files and potentially accessed or acquired sensitive data.
Information Exposed:
- Names
- Social Security numbers
- Driver’s license numbers
- Passport numbers
- Electronic/digital signatures
- Employee identification numbers
- Financial account information
- Medical information
- Health insurance information

A total of 113,575 people in the United States were affected by this breach, including six residents in Maine. Highlands Oncology Group PA began notifying affected individuals in writing on Aug. 1, 2025.
Your Rights and Next Steps
If you received a notice from Highlands Oncology Group PA or believe you may have been affected, there are important steps you can take to protect yourself.
First, take advantage of the complimentary one-year membership of Experian IdentityWorks Credit 3B being offered. This service provides credit monitoring, identity restoration support and up to $1 million in identity theft insurance.
Next, review your account statements and monitor your credit reports for any suspicious activity. Every consumer is entitled to one free credit report annually from each of the three major credit bureaus—Equifax, Experian and TransUnion.
Consider placing a fraud alert or credit freeze on your credit file. A fraud alert is free and will require businesses to verify your identity before extending credit. A credit freeze restricts access to your credit report, making it harder for identity thieves to open accounts in your name.
You May Be Entitled to Compensation
If your information was exposed in the Highlands Oncology Group PA data breach, you may be eligible for compensation. Lawyers are ready to help individuals who have suffered financial loss, identity theft or other harm as a result of this incident. Even if you have not noticed any misuse of your information, you could still qualify to join a class action lawsuit.
To find out if you are eligible, complete the below form. Lawyers are prepared to review your situation and help you pursue your rights.