Highland Oncology Group Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Highlands Oncology Group PA (“Highlands Oncology”) regarding its recent data breach. The Highlands Oncology data breach involved sensitive personal identifiable information and protected health information belonging to an undetermined number of individuals.


Highlands Oncology is a multidisciplinary medical practice specializing in the treatment of cancer and blood disorders. Offering a comprehensive approach to patient care, Highlands Oncology provides a variety of services, including chemotherapy, radiation therapy, diagnostic imaging, pharmacy services, rehabilitation and massage, surgical oncology, physical and occupational therapy, and massage therapy. Headquartered in Fayetteville, Arkansas, Highlands Oncology has four additional locations serving Northwest Arkansas and employs over 500 individuals.


On September 26, 2023, Highlands Oncology discovered that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. Through its investigation, Highlands Oncology determined that an unauthorized third party may have accessed and acquired this sensitive information between September 25 and September 26, 2023. Recently, Highlands Oncology began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Date of birth
  • Driver’s license/state ID number
  • Passport number
  • Military ID number
  • Financial information (e.g., financial account number, credit/debit card number with and without expiration date and security code)
  • Medical information (e.g., diagnosis/conditions, lab results, prescription information) 
  • Health insurance information

If you received a breach notification letter from Highlands Oncology Group PA:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the Highlands Oncology data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Highlands Oncology Group PA:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: