Orange County Radiation Oncology Medical Group
Disclosed Jun 27, 20251 year ago1,911 affectedConfirmed
Orange County Radiation Oncology Medical Group, the covered entity (CE) reported that employees of its business associate (BA) were the targets of an email phishing scheme that impacted the protected health information (PHI) of 1,911 individuals. The PHI involved demographic and treatment information. The BA notified HHS, affected individuals, and the media on behalf of the CE. OCR provided technical assistance regarding the HIPAA Rules. In its mitigation efforts, the CE and BA implemented additional administrative, technical, and security safeguards to better protect sensitive data.
What is known
| People affected | 1,911 (as reported to HHS) |
|---|---|
| Disclosed | Jun 27, 2025 |
| Happened | Dec 13, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Orange County Radiation Oncology Medical Groupoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Orange County Radiation Oncology Medical Group (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 27, 2025 | 1,911 |
| California AGresidents of CA | Jul 15, 2025 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1911 · backfill source
- 2026-09-25 · disclosed: 2025-07-15 to 2025-06-27 · backfill source
- 2026-09-25 · summary: empty to Orange County Radiation Oncology Medical Group, the covered entity (CE) reported that employees of its business associate (BA) were the targets of an email phishing scheme that impacted the protected health information (PHI) of 1,911 indivi · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.
Everything about Orange County Radiation Oncology Medical Group