Skip to content

Radiation Oncology Network of Southern California

Disclosed Jun 27, 20251 year ago12,944 affectedConfirmed

Official notice

The covered entity (CE), Radiation Oncology Network of Southern California, LLC, reported that multiple employees of its business associate (BA) were the subjects of an email phishing incident that affected the protected health information (PHI) of 12,944 individuals. The PHI involved included clinical, demographic, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals the the BA and CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.

What is known

People affected12,944 (as reported to HHS)
DisclosedJun 27, 2025
HappenedDec 13, 2024
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalJun 27, 202512,944
California AGresidents of CAJul 15, 2025
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 12944 · backfill source
  • 2026-09-25 · disclosed: 2025-07-15 to 2025-06-27 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Radiation Oncology Network of Southern California, LLC, reported that multiple employees of its business associate (BA) were the subjects of an email phishing incident that affected the protected health information · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Radiation Oncology Network of Southern California

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.