21st Century Oncology

Disclosed Mar 4, 20162,213,597 affectedSettled

Hackers stole data of 2.2 million cancer care patients, FBI told company

The FBI notified the Fort Myers, Florida radiation oncology provider twice in 2015 that patient information had been illegally obtained by an unauthorized party. 21CO reported 2.2 million affected patients and later paid $2.3 million to HHS.

What is known

People affected	2,213,597 (as reported by the organization)
Disclosed	Mar 4, 2016
Discovered	Nov 13, 2015
Happened	Oct 3, 2015
Attack	Hacking
Data exposed	HealthOtherNamesSocial Security numbers
Sector	Healthcare · US
Status	Settled
Lawsuit or fine	$2.3M HHS OCR HIPAA settlement (2017) (about $2.3M)

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: 21st Century Oncology

Official noticeatg.wa.gov

Washington Attorney General breach notice: 21st Century Oncology

Regulatorocrportal.hhs.gov

HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individuals

Regulatorweb.archive.org

Failure to protect the health records of millions of people costs entity millions of dollars

Official noticemaine.gov

Maine Attorney General breach notice archive: 21st Century Oncology

Notices filed

Residents of CAMar 4, 2016

California AGCount not stated

Residents of WAMar 4, 2016

Washington AG2,802 people

TotalMar 4, 2016

Research2,213,597 people

Residents of MEMar 4, 2016

Maine AG1,016 people

TotalMar 4, 2016

HHS archive2,213,597 people

History of this record

data_types2026-09-25

["health","other"] to ["health","other","names","ssn"]by backfillSource

status2026-09-25

confirmed to settledby seedSource

fine_usd2026-09-25

empty to 2300000by seedSource

lawsuit2026-09-25

empty to $2.3M HHS OCR HIPAA settlement (2017)by seedSource

data_types2026-09-25

[] to ["health","other"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 2213597by seedSource

summary2026-09-25

empty to The FBI notified the Fort Myers, Florida radiation oncology provider twice in 2015 that patient information had been illegally obtained by an unauthorized party. 21CO reported 2.2 million affected patients and later paid $2.3 million to HHSby seedSource

title2026-09-25

empty to Hackers stole data of 2.2 million cancer care patients, FBI told companyby seedSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2015-11-13by backfillSource

occurred2026-09-25

empty to 2015-10-03by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about 21st Century Oncology