What Happened?
On or about December 8, 2025, Marin Cancer Care learned that its computer network had been accessed without authorization and that certain files may have been copied and taken from the network. Upon discovery, MCC began working with third-party cybersecurity investigators to determine the full nature and scope of the incident.
The investigation confirmed signs of unauthorized access to MCC’s network between November 22, 2025 and December 6, 2025. A comprehensive review of the affected files was then conducted to identify what information was involved and which individuals were impacted.
Marin Cancer Care filed official notice of the breach with the U.S. Department of Health and Human Services on February 6, 2026, and with the California Attorney General. Consumer notification letters were mailed on April 23, 2026.
What Information Was Exposed?
The specific data compromised varies by individual. Per Marin Cancer Care’s official notice, the information involved may include:
- Names
- Medical information
- Health insurance information
Given that this is a specialized cancer care provider, the data involved is particularly sensitive. Oncology records may contain highly personal details about a patient’s health condition that patients entrust to their providers in confidence.
What Is Marin Cancer Care Doing?
Following the discovery of the breach, Marin Cancer Care took steps to secure its network and is offering complimentary identity monitoring services through Cyberscout, a TransUnion company, to affected individuals. The monitoring includes single-bureau credit monitoring for 12 months and proactive fraud assistance. Those who received a notification letter should follow the enrollment instructions included in the letter to activate these services within 90 days of the letter date.
Why This Breach Demands Attention
Healthcare data breaches consistently rank among the most serious types of data incidents because of the deeply personal nature of the information involved. Unlike a compromised credit card number, medical records cannot simply be changed. Once exposed, this information can be exploited for years.
California patients are entitled to strong protections under state law, including California’s data breach notification requirements and HIPAA. When those safeguards fail, affected individuals have the right to hold organizations accountable.
Your Rights as an Affected Patient
If you were affected by the Marin Cancer Care data breach, you may be entitled to compensation for:
- The unauthorized exposure of sensitive medical and personal information
- Costs related to identity monitoring and protection
- Emotional distress from having private health information exposed
- Any actual financial losses resulting from the misuse of your information
Contact Wilshire Law Firm for a Free Consultation
Wilshire Law Firm is currently reviewing claims arising from the Marin Cancer Care data breach. Our data breach attorneys understand how distressing it is to learn that your private health information has been compromised — especially when it involves sensitive oncology records.
We offer free, confidential consultations. We take no fees unless you get paid.
Call us 24/7 or contact us online to speak with a legal professional today.
