Highlands Oncology Group Settlement Resolves Lawsuit Over 2025 Data Breach

New to ClassAction.org? Read our Newswire Disclaimer

Highlands Oncology Group has agreed to a settlement to wrap up a class action lawsuit that alleged the Arkansas-based cancer care provider failed to protect sensitive information from a data breach discovered in or around June 2025.

Don’t miss the next class action settlement deadline. Sign up for ClassAction.org’s free weekly newsletter.

The Highlands Oncology Group class action settlement received preliminary approval from the court on June 16, 2026. Eligible to participate in the settlement are all United States residents whose private information was compromised in the Highlands Oncology data breach in or around June 2025.  

The court-approved Highlands Oncology Group class action settlement website can be found at HighlandsOncologySettlement.com.

Highlands Oncology settlement class members who file a timely, valid claim form can receive up to $4,250 for documented out-of-pocket losses incurred between June 2, 2025 and October 22, 2026 because of the data breach. This benefit covers losses from identity theft or fraud and costs for credit reports, credit monitoring, freezing or unfreezing credit, replacement IDs, postage, and more.

Class members must submit proof, such as bank statements or receipts, to receive a documented-loss payment.

In lieu of a documented-loss payment, class members can submit a claim form to receive a $50 cash payment, with no proof required.

Lastly, all class members can elect on their claim form to receive three years of CyEx Medical Shield Complete, which includes medical identity theft insurance.

To submit a Highlands Oncology settlement claim form online, class members can head to this page and enter the login ID and PIN found on their copy of the settlement notice. Alternatively, class members can download a PDF claim form to print, complete and return by mail to the settlement administrator.

All Highlands Oncology Group settlement claim forms must be submitted online or postmarked by October 22, 2026.

The court will determine whether to grant final approval to the Highlands Oncology settlement following a hearing on November 6, 2026. Compensation will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The Highlands Oncology Group class action lawsuit alleged that the Arkansas-based cancer treatment center failed to implement reasonable cybersecurity measures to prevent a data breach discovered in June 2025.  

Court documents state that sensitive information that may have been compromised in the cyber incident included names, dates of birth, Social Security numbers, driver’s license or state ID numbers, passport numbers, credit and debit card numbers, financial account numbers, medical treatment information, medical record numbers, patient account numbers and/or health insurance policy information.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.