Minnesota Epilepsy Group, P.A. confirmed a second 2026 cyberattack exposed names, Social Security numbers, dates of birth, addresses, medical treatment information, and health insurance details for 82,574 people. The breach was detected in August 2026. Affected individuals should enroll in the offered credit monitoring and watch their credit reports and insurance statements closely for signs of fraud.
| Company | Minnesota Epilepsy Group, P.A. |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Names, Home Addresses, Dates of Birth, Social Security Numbers, Medical Treatment Information, Health Insurance Information |
| People Affected | 82,574 individuals |
| Attack Method | Unauthorized Network Access |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Minnesota Epilepsy Group, P.A. Data Breach?
Minnesota Epilepsy Group, P.A., a Level 4 Epilepsy Center based in Roseville, Minnesota, has disclosed its second cyberattack of 2026. This new Minnesota Epilepsy Group data breach is separate from an earlier incident reported the same year. It shows how repeat targeting of healthcare providers can put patient data at risk more than once.
According to the organization, unauthorized access to its network occurred in August 2026. The intrusion was detected on August 10, 2026, and the clinic moved quickly to secure its systems once it noticed suspicious activity. An internal investigation was then launched to figure out exactly what happened and which systems were touched.
That investigation confirmed an unauthorized third party had access to parts of the network on that date. As a result, the organization brought in forensic resources to review the affected files in detail. This review process took several weeks because the data involved varied from person to person, which made confirming the full scope more complex.
By September 17, 2026, Minnesota Epilepsy Group had confirmed that personal and protected health information had, in fact, been compromised. The timeline between detection and confirmation reflects the careful review typically required before a healthcare organization can notify patients accurately. Because of this, notification letters did not go out until the following month.
Who was affected?
The Minnesota Epilepsy Group data breach affects patients whose records were stored on the compromised portion of the network. Based on the notification, 82,574 individuals were affected by this latest incident. This is a similar number to the 80,061 people affected by the organization’s earlier 2026 breach, though it has not been confirmed whether the two incidents are connected.
Because the organization is a specialized epilepsy treatment center, those affected are likely current and former patients who received care or consultation services there. The notification does not indicate whether employees were also affected, so the population appears to be patient-focused. It also has not been publicly disclosed whether any minors were among those affected, though pediatric patients are not uncommon at specialized neurology centers.
The geographic scope appears centered on Minnesota, given the clinic’s single location in Roseville. However, patients from other states may also be included if they traveled for specialized epilepsy care. Anyone who received services from this provider should consider themselves potentially included until they confirm otherwise through official notification.
What Information Was Potentially Exposed?
Minnesota Epilepsy Group confirmed that the exposed information varied from person to person. Not every affected individual had the same combination of data involved, but names were paired with at least one other category of sensitive information in every case.
- Names
- Home addresses
- Dates of birth
- Social Security numbers
- Medical treatment information
- Health insurance information
This combination of data creates meaningful risk because it blends identity markers with medical details. When a Social Security number is paired with a date of birth and address, criminals can often use that combination to open new credit accounts or file fraudulent tax returns. This is a core reason identity theft protection is typically offered after this kind of exposure.
In addition, the presence of medical treatment and health insurance information raises the possibility of medical identity theft. This happens when someone uses stolen insurance details to obtain treatment or prescriptions under another person’s name. As a result, affected individuals may want to watch their insurance statements closely for unfamiliar claims, not just their bank and credit accounts.
What is the company doing?
Once Minnesota Epilepsy Group discovered the unauthorized access, it took immediate steps to secure its network. The organization then launched a thorough internal investigation to determine exactly what had happened and which files were affected. This review ultimately confirmed the compromise of personal and protected health information on September 17, 2026.
Following that confirmation, the organization began mailing notification letters to affected individuals starting October 16, 2026. At the time those letters went out, no evidence of actual misuse of patient data had been identified. Because Social Security numbers were involved for some individuals, the organization is offering complimentary credit monitoring and identity theft protection services to those affected.
Looking ahead, Minnesota Epilepsy Group says it had already taken steps to strengthen its security following the earlier 2026 incident. In response to this second attack, the organization plans to implement additional cybersecurity measures. This layered response reflects an effort to reduce the chances of a third incident occurring.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request a copy of their credit report from each of the three major bureaus. Because Social Security numbers were involved in this breach, new account fraud is a realistic concern. Reviewing your report regularly helps you catch unfamiliar accounts before they cause lasting damage.
You can get free weekly credit reports through AnnualCreditReport.com. In addition, checking your report every few months going forward is a smart habit, since fraud attempts sometimes surface months after a breach is reported.
Consider a Fraud Alert or Credit Freeze
Because Social Security numbers were part of this data breach, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires lenders to take extra steps to verify your identity before approving new credit. A credit freeze goes further by blocking most new credit inquiries entirely until you lift it.
To set either protection up, contact Equifax, Experian, or TransUnion directly. Only one bureau needs to be contacted for a fraud alert, since they share that information. However, a credit freeze typically needs to be placed with each bureau separately for full protection.
Watch for Medical Identity Theft
Since medical treatment and health insurance information were exposed, affected individuals should review their explanation of benefits statements carefully. Look for any services, prescriptions, or treatments you don’t recognize. This can be an early sign that someone is using your insurance details fraudulently.
If you spot anything unusual, contact your insurance provider right away to dispute the charge. In addition, request a copy of your medical records periodically to confirm they accurately reflect your actual care history. Catching medical identity theft early can prevent errors in your health record from affecting future treatment decisions.
Enroll in the Offered Identity Protection Services
Minnesota Epilepsy Group is offering complimentary credit monitoring and identity theft protection to those whose Social Security numbers were involved. Affected individuals should enroll as soon as possible, since these services typically have enrollment deadlines. The notification letter should include specific instructions and an activation code for signing up.
This monitoring can alert you quickly if new accounts are opened in your name. As a result, enrolling promptly gives you a head start on spotting potential misuse. It’s a practical, no-cost way to add a layer of protection while the fuller risks of this breach become clearer over time.
Stay Alert for Phishing Attempts
After a healthcare data breach, scammers sometimes use leaked details to craft convincing phishing emails, texts, or phone calls. These messages may reference your real name or treatment history to appear legitimate. Because of this, affected individuals should be cautious of any unexpected messages asking for personal or financial information.
Never click links or share information with contacts you didn’t initiate yourself. Instead, verify requests by calling the organization directly using a number you look up independently. If you believe you’ve received a phishing attempt related to this breach, consider reporting it to the FTC and consulting a data breach attorney about your options.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.