Nura PLLC Data Breach Exposes Sensitive Patient Information of Over 5,200 Individuals
On November 21, 2025, Minnesota-based pain management clinic Nura PLLC disclosed a data breach affecting at least 5,207 individuals across the U.S., as reported to the U.S. Department of Health and Human Services (HHS). The incident involved unauthorized access to sensitive patient data, though the exact method of intrusion remains undisclosed.
The breach potentially exposed a range of personally identifiable information (PII) and protected health information (PHI), including names, addresses, dates of birth, Social Security numbers, medical records, treatment details, and insurance data. The combination of such data heightens risks of identity theft and medical fraud for affected individuals.
While Nura has complied with federal notification requirements, further details on the breach’s scope, response measures, or remediation efforts have not been released. Updates on the incident are expected as additional information becomes available.
Source: https://www.claimdepot.com/data-breach/nura-2025
Nura Pain Clinics cybersecurity rating report: https://www.rankiteo.com/company/nura-pain-clinics
"id": "NUR1767038920",
"linkid": "nura-pain-clinics",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '5207',
'industry': 'Healthcare',
'location': 'Minnesota, USA',
'name': 'Nura PLLC',
'type': 'Healthcare Clinic'}],
'customer_advisories': 'Individuals affected are advised to monitor for '
'identity theft and medical fraud.',
'data_breach': {'number_of_records_exposed': '5207',
'personally_identifiable_information': ['Names',
'Addresses',
'Dates of birth',
'Social Security '
'numbers',
'Medical records',
'Treatment details',
'Insurance '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_publicly_disclosed': '2025-11-21',
'description': 'Nura PLLC, a Minnesota-based pain management clinic, reported '
'a data breach impacting at least 5,207 individuals in the '
'United States. The incident involved unauthorized access to '
'sensitive patient information, potentially including both '
'personally identifiable information (PII) and protected '
'health information (PHI).',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'references': [{'source': 'U.S. Department of Health and Human Services'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA'],
'regulatory_notifications': ['U.S. Department of '
'Health and Human '
'Services']},
'title': 'Nura PLLC Data Breach',
'type': 'Data Breach'}