Minnesota ENT Data Breach Exposes Sensitive Patient Information
Shamis & Gentile P.A., a law firm specializing in data breach litigation, is investigating a cybersecurity incident involving Minnesota ENT (Oakdale Ear Nose & Throat PA), a medical practice group operating in Minnesota since 2007. The breach, discovered in mid-2026, involved unauthorized access to six employee email accounts, potentially exposing sensitive patient data.
After detecting the intrusion, Minnesota ENT secured its systems and launched an investigation with external cybersecurity experts. By July 15, 2026, the company confirmed that files containing personally identifiable information (PII) may have been accessed. The breach was officially reported to the Massachusetts Attorney General on August 12, 2026.
The exposed data varies by individual but may include:
- Medical records
- Social Security numbers
- Full names and dates of birth
- Driver’s license numbers
- Financial account details
- Health insurance information
Minnesota ENT serves patients across multiple locations, including Golden Valley, Robbinsdale, and Maple Grove, offering specialized ear, nose, and throat care. The incident highlights ongoing risks to healthcare data security, with potential legal recourse available for affected individuals.
Source: https://www.claimdepot.com/investigations/minnesota-ent-data-breach-2026
Ear Nose and Throat Specialty Care of MN cybersecurity rating report: https://www.rankiteo.com/company/ear-nose-and-throat-specialty-care-of-mn
"id": "EAR1786631333",
"linkid": "ear-nose-and-throat-specialty-care-of-mn",
"type": "Breach",
"date": "7/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Minnesota, USA (Golden Valley, '
'Robbinsdale, Maple Grove)',
'name': 'Minnesota ENT (Oakdale Ear Nose & Throat PA)',
'type': 'Medical Practice Group'}],
'attack_vector': 'Unauthorized email account access',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Medical records',
'Social Security numbers',
'Full names and dates of birth',
'Driver’s license numbers',
'Financial account details',
'Health insurance information']},
'date_detected': '2026-07-01',
'date_publicly_disclosed': '2026-08-12',
'description': 'A cybersecurity incident involving Minnesota ENT (Oakdale Ear '
'Nose & Throat PA) where unauthorized access to six employee '
'email accounts potentially exposed sensitive patient data, '
'including medical records, Social Security numbers, and '
'financial details.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'exposure of sensitive patient data',
'data_compromised': 'Personally identifiable information (PII), '
'medical records, financial details',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential legal actions from affected '
'individuals',
'payment_information_risk': 'High',
'systems_affected': 'Employee email accounts'},
'initial_access_broker': {'entry_point': 'Employee email accounts'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA (potential)'],
'regulatory_notifications': 'Reported to '
'Massachusetts Attorney '
'General'},
'response': {'communication_strategy': 'Reported to Massachusetts Attorney '
'General',
'containment_measures': 'Secured systems post-detection',
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'External cybersecurity experts'},
'title': 'Minnesota ENT Data Breach Exposes Sensitive Patient Information',
'type': 'Data Breach'}