Connect with us

Hi, what are you looking for?


Data Breaches

US Cancer Center Data Breach Impacting 800,000

City of Hope is notifying 800,000 individuals of a data breach impacting their personal and health information.

Cancer treatment and research center City of Hope this week started notifying over 800,000 individuals that their personal and health information was compromised in a data breach.

A National Cancer Institute (NCI)-designated comprehensive cancer center, City of Hope is based in Duarte, California, but has a network of clinical practice locations and offices throughout the US.

The data breach occurred between September 19 and October 12, 2023, the center notes in a notification letter to the impacted individuals, a copy of which was submitted to the Maine Attorney General’s Office.

During that time frame, an unauthorized third-party accessed a subset of City of Hope systems and copied some files containing the affected individual’s information.

The stolen data, the organization says, includes names, dates of birth, email addresses, phone numbers, driver’s license numbers, ID numbers, Social Security numbers, bank account numbers, credit card details, health insurance information, and medical information.

“While there is no indication of any identity theft or fraud occurring as a result of this incident, we want to let you know what happened, and the steps that we have taken in response,” City of Hope’s notification letter reads.

Immediately after discovering the incident, the cancer center took steps to contain it, notified law enforcement and regulatory entities, and retained a cybersecurity firm to improve the security of its systems.

The affected individuals are being offered identity monitoring services for two years.

Advertisement. Scroll to continue reading.

City of Hope told the Maine AGO that more than 800,000 individuals were affected by the data breach. Some of them were notified of the incident in December 2023, but not all had been identified until late March 2024, the center says.

On April 2, City of Hope posted on its website an incident notice that reiterates the information in the notification letter.

Related: Massachusetts Health Insurer Data Breach Impacts 2.8 Million

Related: HMG Healthcare Says Data Breach Impacts 40 Facilities

Related: Ransomware Gang Claims Attack on Capital Health

Written By

Ionut Arghire is an international correspondent for SecurityWeek.


Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.


SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.


People on the Move

Cody Barrow has been appointed the new CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.