Oncology Institute Says Third-Party Breach Affected Patient Information
Summary
The Oncology Institute says a third-party cybersecurity incident affected patient information. Kroll notified the provider on May 20, 2026, of unauthorized access to vendor systems affecting patient data.
Key points
- The Oncology Institute (TOI) says a third-party cybersecurity incident affected patient information.
- TOI said Kroll notified it on May 20, 2026, that a third party had gained unauthorized access to certain vendor information systems, including systems affecting patient data.
- The vendor’s investigation was ongoing when TOI first disclosed the incident in November 2025; it could not then determine whether patient information was affected.
- TOI believes other healthcare providers were affected, and the vendor has set up a patient portal for information and inquiries.
- TOI has not named the vendor. The article identifies TriZetto Provider Solutions as a possible candidate, not a confirmed one.
- The article says no known ransomware group has claimed responsibility for an attack on TriZetto or TOI.
Article Details
- Victim Organization
- The Oncology Institute (TOI)
- Incident Type
- Third-party cybersecurity incident involving unauthorized access to information systems and patient data
- Data Types Exposed
- Patient information; specific data elements not disclosed
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- Not disclosed
- Ransom Or Extortion
- No known ransomware group has claimed responsibility; no other extortion activity was reported.
- Claim Status
- confirmed