Physicians' Clinic of Iowa: Physicians' Clinic of IowaCyberattack

Cybersecurity Alert: Anubis Threat Actor Linked to Physicians' Clinic of Iowa Data Breach

On February 26, 2026, the threat actor Anubis reportedly exfiltrated sensitive data from Physicians' Clinic of Iowa (PCI), one of the state’s largest private multi-specialty medical practices. Based in Cedar Rapids, PCI operates a network of clinics, a urology office, and provides services across multiple hospitals and urgent care facilities in Iowa.

While PCI has not officially confirmed the breach or disclosed the scope of compromised data, Anubis published images suggesting that personal identifiers and protected health information (PHI) were exposed. The incident potentially affects current and former patients, though the clinic has not issued a public statement detailing the impact.

Legal teams are investigating the breach to determine whether a class action lawsuit can be filed on behalf of affected individuals. The investigation seeks to address potential harms, including loss of privacy, financial costs, and time spent mitigating the breach’s effects. No confirmation has been made regarding the number of individuals impacted or the specific data types involved.

This incident follows a pattern of cyberattacks targeting healthcare providers, raising concerns about the security of patient records and the growing threat posed by ransomware and data-extortion groups. Further details are expected as the investigation progresses.

Source: https://www.classaction.org/data-breach-lawsuits/physicians-clinic-of-iowa-february-2026

Physicians' Clinic of Iowa cybersecurity rating report: https://www.rankiteo.com/company/physicians'-clinic-of-iowa

"id": "PHY1772664255",
"linkid": "physicians'-clinic-of-iowa",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Current and former patients',
                        'industry': 'Healthcare',
                        'location': 'Cedar Rapids, Iowa',
                        'name': "Physicians' Clinic of Iowa (PCI)",
                        'size': 'Large (multi-specialty medical practice)',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal identifiers',
                                              'Protected health information '
                                              '(PHI)']},
 'date_detected': '2026-02-26',
 'description': 'On February 26, 2026, the threat actor Anubis reportedly '
                "exfiltrated sensitive data from Physicians' Clinic of Iowa "
                '(PCI), one of the state’s largest private multi-specialty '
                'medical practices. Anubis published images suggesting that '
                'personal identifiers and protected health information (PHI) '
                'were exposed. The incident potentially affects current and '
                'former patients, though the clinic has not issued a public '
                'statement detailing the impact. Legal teams are investigating '
                'the breach to determine whether a class action lawsuit can be '
                'filed on behalf of affected individuals.',
 'impact': {'data_compromised': 'Personal identifiers and protected health '
                                'information (PHI)',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential class action lawsuit'},
 'investigation_status': 'Ongoing',
 'motivation': 'Data Extortion',
 'ransomware': {'data_exfiltration': True},
 'references': [{'source': 'Cybersecurity Alert'}],
 'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit',
                           'regulations_violated': ['HIPAA (potential)']},
 'threat_actor': 'Anubis',
 'title': "Anubis Threat Actor Linked to Physicians' Clinic of Iowa Data "
          'Breach',
 'type': 'Data Breach'}