21st Century Oncology
Disclosed Mar 4, 201610 years ago2,213,597 affectedSettled
Hackers stole data of 2.2 million cancer care patients, FBI told company
The FBI notified the Fort Myers, Florida radiation oncology provider twice in 2015 that patient information had been illegally obtained by an unauthorized party. 21CO reported 2.2 million affected patients and later paid $2.3 million to HHS.
What is known
| People affected | 2,213,597 (as reported by the organization) |
|---|---|
| Disclosed | Mar 4, 2016 |
| Discovered | Nov 13, 2015 |
| Happened | Oct 3, 2015 |
| Attack | Hacking |
| Data exposed | Health, Other, Names, Social Security numbers |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | $2.3M HHS OCR HIPAA settlement (2017) (about $2.3M) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: 21st Century Oncologyoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: 21st Century Oncologyatg.wa.gov · Official notice | Official notice |
| HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individualsocrportal.hhs.gov · Regulator | Regulator |
| Failure to protect the health records of millions of people costs entity millions of dollarsweb.archive.org · Regulator | Regulator |
| Maine Attorney General breach notice archive: 21st Century Oncologymaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 4, 2016 | |
| Washington AGresidents of WA | Mar 4, 2016 | 2,802 |
| Researchtotal | Mar 4, 2016 | 2,213,597 |
| Maine AGresidents of ME | Mar 4, 2016 | 1,016 |
| HHS archivetotal | Mar 4, 2016 | 2,213,597 |
History of this record
- 2026-09-25 · data_types: ["health","other"] to ["health","other","names","ssn"] · backfill source
- 2026-09-25 · status: confirmed to settled · seed source
- 2026-09-25 · fine_usd: empty to 2300000 · seed source
- 2026-09-25 · lawsuit: empty to $2.3M HHS OCR HIPAA settlement (2017) · seed source
- 2026-09-25 · data_types: [] to ["health","other"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 2213597 · seed source
- 2026-09-25 · summary: empty to The FBI notified the Fort Myers, Florida radiation oncology provider twice in 2015 that patient information had been illegally obtained by an unauthorized party. 21CO reported 2.2 million affected patients and later paid $2.3 million to HHS · seed source
- 2026-09-25 · title: empty to Hackers stole data of 2.2 million cancer care patients, FBI told company · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2015-11-13 · backfill source
- 2026-09-25 · occurred: empty to 2015-10-03 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.