Oncology Institute confirms patient data breach from vendor cybersecurity incident

Filed May 22, 2026 · Period ending May 20, 2026 · ~1 min read

Key Changes

• high

  Third-party vendor breach confirmed May 20, 2026: unauthorized access to patient information systems including personal healthcare data. Follow-up to November 2025 voluntary disclosure.

  Item 1.05 verify on EDGAR →
• high

  Company states no material impact on operations, financial systems, or patient care quality to date, but still evaluating potential effects on financial condition and results.

  Item 1.05 verify on EDGAR →
• medium

  Credit monitoring and protection services will be offered to all affected patients, representing direct remediation costs from the breach.

  Item 1.05 verify on EDGAR →