ION Data Breach ExposedRocky Mountain Oncology Care sensitive information

The Rocky Mountain Oncology Care data breach has raised major concerns for patients in Wyoming and beyond. After a phishing attack targeted Integrated Oncology Network (ION), which manages the facility, cybercriminals gained unauthorized access to private patient data. As a result, names, Social Security numbers, medical records, and financial details may now be at risk. Patients affected by the Rocky Mountain Oncology Care data breach should act quickly to protect their identities.
How the Rocky Mountain Oncology Care Data Breach Happened
The data breach occurred after a phishing email compromised ION’s internal systems between December 13 and December 16, 2024. During this window, attackers accessed sensitive information through email and SharePoint accounts. Once ION detected suspicious activity, the organization launched a detailed investigation and began reviewing the affected data to identify those impacted by the Rocky Mountain Oncology Care data breach.
Who Was Impacted by the Rocky Mountain Oncology Care Data Breach?
On June 27, 2025, ION began mailing notification letters to patients whose data was compromised in the Rocky Mountain Oncology Care data breach. If you received a letter, or if you’ve ever received treatment from Rocky Mountain Oncology Care, your private information could be at risk.
What Information Was Exposed in the Rocky Mountain Oncology Care Data Breach?
Through its review, ION discovered that the Rocky Mountain Oncology Care data breach exposed a wide range of personal details, including:
Full names
Dates of birth
Social Security numbers
Health insurance details
Financial account numbers
Medical data (diagnoses, lab results, provider names, treatment dates)
Residential addresses
This highly sensitive data can be exploited for identity theft, medical fraud, and financial scams.
What Should Patients Do After the Rocky Mountain Oncology Care Data Breach?
If you received a notification or suspect your information was involved:
- Review the statements received from their healthcare providers and health insurance plans. If you see any services that were not received, you should contact the provider or health plan immediately.
Monitor your credit reports and bank accounts for suspicious activity.
Place a fraud alert or security freeze with major credit bureaus.
Take advantage of any free credit monitoring or identity theft protection offered in the letter.
Contact a data breach attorney to understand your legal rights and options.
Taking these steps can help reduce your risk of identity theft and financial loss after the Rocky Mountain Oncology Care data breach.
Legal Help?
Have you recieved the data breach letter from ION?
We want to help you understand your options. Fill out the online form
Links for more information
Number of Individuals affected
10,268
Rocky Mountain Oncology Care
8,270
e+ Oncologics Louisiana, LLC
7,670
California Cancer Associates for Research and Excellence – Fresno
4,403
Mojave Radiation Oncology Medical Group
4,108
South Georgia Center for Cancer Care
3,159
PET Imaging of Tulsa
2,219
Arcadiana Radiation Therapy, LLC
1,935
PET Imaging of Dallas Northeast
1,808
PET Imaging of Sugar Land
1,236
PET Imaging of Houston Medical Center
936
Cancer Care Center of North Florida – Lake Butler