Highlands Oncology Group Data Breach Class Action Settlement

Highlands Oncology Group, an Arkansas-based cancer treatment center, agreed to a class action settlement to resolve allegations related to a data breach that occurred in June 2025. The lawsuit accused the center of failing to safeguard patient information following an alleged ransomware cyberattack.The plaintiffs claimed that the facility could have prevented the breach by implementing reasonable cybersecurity measures. The allegations suggest that the breach exposed individuals to risks of fraud and identity theft, forming the basis of the class action claims.Class members are eligible to receive a cash payment of up to $4,250 to cover documented losses, such as identity theft, fraud, and credit expenses, or a $50 payment if no such losses are documented. All members qualify for three years of CyEx Medical Shield Complete, which includes $1 million in medical identity theft insurance. To receive benefits, class members must submit a valid claim form by October 22, 2026.