.png)
Rocky Mountain Oncology Care Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Rocky Mountain Oncology Care data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Rocky Mountain Oncology Care
Rocky Mountain Oncology Care, also known as Rocky Mountain Oncology Center, is a medical practice that provides comprehensive cancer care services. Rocky Mountain Oncology is owned and has administrative services provided by Integrated Oncology Network.
The organization is staffed by board-certified doctors and expert medical professionals who focus on delivering advanced oncology treatments and therapies. They serve communities in Wyoming and have been operating for more than 20 years, offering patients access to both traditional and complementary therapies such as massage, yoga and acupuncture.
What happened?
Integrated Oncology Network discovered a data breach affecting 10,268 Rocky Mountain Oncology Care patients. The data breach occurred between Dec. 13, 2024, and Dec. 16, 2024 and compromised both personally identifiable information (PII) and protected health information (PHI).
On May 9, 2025 an investigation determined a cybercriminal accessed email and SharePoint accounts in order to perpetuate an email phishing scheme.
Exposed Information
- Name
- Address
- Dates of birth
- Social Security number
- Financial account information
- Diagnosis information
- Lab results
- Medication information
- Treatment information
- Health insurance and claims information
- Provider name
- Treatment dates
Rocky Mountain Oncology Care reported the breach to the U.S. Department of Health and Human Services on June 27, 2025 and published the ION Notice of Email Phishing Incident on its own website.
Your Rights and Next Steps
If you received a data breach notice or believe your information may have been involved, it is important to understand your rights. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring services: Sign up for free years of credit monitoring, if offered.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help you understand your rights and guide you through the process of joining a class action lawsuit.
You May Be Entitled to Compensation
If your personal and protected health information was exposed in the Rocky Mountain Oncology Care data breach, you may be eligible for compensation, which can include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress. Lawyers are actively investigating the situation and can help you determine your options.
To get started, complete the form below to join the lawsuit and protect your rights.
.svg)