Class action settlement
Highlands Oncology Group
About this settlement
Data breach exposed patients' personal and medical information
Summary
Highlands Oncology Group, an Arkansas cancer care provider, discovered a cyberattack in June 2025 in which hackers accessed and stole patients' personal and medical information, including names, Social Security numbers, and health insurance details. A class action was filed alleging the company failed to adequately protect this data. Under the settlement, Class Members can enroll in three years of medical identity theft monitoring with $1 million in insurance, and can also claim either documented out-of-pocket losses up to $4,250 or a flat $50 alternate cash payment with no proof required. The settlement is non-punitive as to fault, with Highlands Oncology denying wrongdoing.
Who qualifies
The Class is defined as all individuals residing in the United States whose Private Information was compromised in the Data Breach on or around June 2025. Excluded from the Class are directors and officers of Highlands Oncology, governmental entities, and the assigned Judge, that Judge's immediate family, and Court staff. Class Members may claim Medical Data Monitoring plus either documented losses (up to $4,250) or a $50 flat cash payment.
Suits does not handle payments or process claims. Payments are issued by the claim administrator and typically take 3-6 months.