Madison Healthcare Services Suffers Data Breach, Exposing Sensitive Patient Information
Between July and August 2025, Madison Healthcare Services, a Minnesota-based healthcare provider, fell victim to a data breach that compromised the personal information of individuals in its database. The incident came to light on September 23, 2025, when the threat actor Worldleaks claimed responsibility and posted details on the Tor network, signaling a dark web leak.
The breach was formally disclosed to the U.S. Department of Health and Human Services (HHS) on December 2, 2025, with an initial report indicating 500 affected individuals. While the exact types of exposed data remain unspecified, healthcare breaches of this nature typically include sensitive details such as names, addresses, dates of birth, Social Security numbers, medical record numbers, health insurance information, and clinical records.
The severity of the breach is amplified by the attackers’ public claim of leaking the data, raising concerns over potential identity theft and fraud for those impacted. Madison Healthcare Services launched an internal investigation following the discovery and has since notified affected individuals. The organization’s consumer notice outlined the incident and provided guidance for those whose information may have been exposed.
The incident underscores the growing threat of dark web-driven data leaks in the healthcare sector, where stolen information can be exploited for malicious purposes.
Source: https://www.claimdepot.com/data-breach/madison-healthcare-services-2025
Madison Healthcare Services cybersecurity rating report: https://www.rankiteo.com/company/madison-lutheran-home
"id": "MAD1765857841",
"linkid": "madison-lutheran-home",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '500',
'industry': 'Healthcare',
'location': 'Minnesota, USA',
'name': 'Madison Healthcare Services',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Posted a consumer notice outlining the incident and '
'recommended steps for those whose information may '
'have been exposed.',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '500',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Dates of birth',
'Social Security numbers',
'Medical record numbers',
'Health insurance details',
'Clinical information']},
'date_publicly_disclosed': '2025-09-23',
'description': 'Between July and August 2025, Madison Healthcare Services '
'experienced a data breach impacting the personal information '
'of people in its database. The breach was first made public '
'when a threat actor known as Worldleaks claimed '
'responsibility and posted about the incident on the Tor '
'network on Sept. 23, 2025. The breach was disclosed to the '
'U.S. Department of Health and Human Services on Dec. 2, 2025, '
'with a placeholder value of 500 people affected. The '
'attackers accessed sensitive data and publicly claimed to '
'have leaked it on the dark web, increasing the risk of '
'identity theft and fraud for those affected.',
'impact': {'brand_reputation_impact': 'Likely impacted due to dark web leak',
'data_compromised': 'Personal and healthcare information',
'identity_theft_risk': 'High'},
'initial_access_broker': {'data_sold_on_dark_web': 'Claimed by threat actor'},
'investigation_status': 'Ongoing',
'recommendations': 'Affected individuals should consider placing a fraud '
'alert or credit freeze with the major credit bureaus, '
'change passwords for online accounts (especially '
'healthcare or financial services), and be cautious of '
'unsolicited communications requesting personal '
'information.',
'references': [{'date_accessed': '2025-09-23',
'source': 'Threat actor claim on Tor network'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA'],
'regulatory_notifications': 'Disclosed to U.S. '
'Department of Health '
'and Human Services on '
'2025-12-02'},
'response': {'communication_strategy': 'Posted a consumer notice outlining '
'the incident and recommended steps '
'for affected individuals'},
'threat_actor': 'Worldleaks',
'title': 'Madison Healthcare Services Data Breach',
'type': 'Data Breach'}