Integrated Oncology Network (ION) is notifying patients whose information may have been involved in a data security incident.
On July 31, 2025, ION concluded its investigation of a data security incident that resulted in unauthorized access to a small number of systems that maintain patient information. ION first learned of the incident on April 11, 2025, and immediately took steps to secure its systems and contain the incident. ION also launched an investigation of the incident with the assistance of third-party forensic experts and notified law enforcement. Through the investigation, it was determined that an unauthorized party accessed some of its systems between March 31, 2025, and April 10, 2025, and accessed or acquired certain files. ION then initiated a review and analysis of those files, which is ongoing.
Through its ongoing review, ION identified files that were on the systems that were accessed / acquired, and a review of those files determined that they contain information pertaining to certain patients. The information involved includes names and Social Security numbers and potentially one or more of the following: address, date of birth, medical record number, diagnoses / conditions, diagnostic imaging, diagnostic test results, lab results, medications, treatment information, health insurance information, provider names, dates of treatment, driver’s license numbers and/or financial account information.
Between July 11, 2025, and August 6, 2025, ION provided notifications to oncology physician practices that have patients whose information may have been involved in the incident.