Phishing Attack Breaches US Cancer Centers

A coordinated phishing attack has compromised sensitive patient data at multiple U.S. cancer centers affiliated with Integrated Oncology Network (ION). The breach, occurring between December 13 and 16, 2024, accessed employee email and SharePoint accounts, exposing protected health information such as names, diagnoses, and Social Security numbers. Over 130,000 individuals are affected, with major centers like Rocky Mountain Oncology Care and e+ Oncologics Louisiana reporting significant impacts. ION has responded by enhancing cybersecurity measures and offering affected individuals credit and identity theft protection. This incident underscores the vulnerability of healthcare organizations to cyber threats and the critical need for robust cybersecurity protocols.