Strauss Borrelli PLLC, a leading data breach law firm, is investigating Rocky Mountain Oncology Care regarding its recent data breach. The Rocky Mountain Oncology Care data breach involved sensitive personal identifiable information and protected health information belonging to over 10,000 individuals.
ABOUT ROCKY MOUNTAIN ONCOLOGY CARE:
Rocky Mountain Oncology Care is an oncology practice based in Wyoming. Providing various types of cancer treatment, Rocky Mountain Oncology Care specializes in bone, brain, breast, colorectal, gastrointestinal, gynecologic, head and neck, lung, prostate, and skin cancers.3 Headquartered in Casper, Wyoming, Rocky Mountain Oncology Care employs over 30 individuals.2 Rocky Mountain Oncology Care is a part of Integrated Oncology Network (“ION”), which is a physician management, radiation oncology management and cancer center development company that partners with hospitals and physicians.4
WHAT HAPPENED?
Recently, Rocky Mountain Oncology Care posted a notice on its website of a phishing incident related to the breach at ION. According to the breach notice posted on its website, ION learned that an email phishing incident resulted in unauthorized access to patient information in email and SharePoint accounts. 1 As a result, ION launched an investigation to determine the nature of the incident.
Through its investigation, ION confirmed that sensitive personal information in its systems may have been accessed by an unauthorized third party between December 13 and December 16, 2024. 1 As a result, ION began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. According to the breach notice, the sensitive personal information potentially affected includes the following types of information:
- Name
- Social Security number
- Financial account information
- Medical information (diagnosis, lab results, provider names, dates of treatment)
- Health insurance information
- Address
- Date of birth
On June 27, 2025, ION began mailing data breach notification letters to impacted individuals. A link to the form breach notification posted on ION’s website is below.
If you received a breach notification letter from Integrated Oncology Network on behalf of Rocky Mountain Oncology Care:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
