Breaches and incidents
Mankato Clinic (Minnesota): patient health and insurance data taken in network intrusion
KEYC reported on 15 Sep that Mankato Clinic was investigating “unauthorized activity involving our computer network” after a cybercriminal group claimed...
- Disclosed
- Verification
- Checked against a primary source
What happened
- KEYC reported on 15 Sep that Mankato Clinic was investigating “unauthorized activity involving our computer network” after a cybercriminal group claimed data theft; the clinic’s 16 Oct notice says information “within our network was accessed and taken between August 12 and August 18, 2026”, including name, date of birth, health insurance, billing or claims, diagnosis, medical record number, Medicare/Medicaid, prescription and treatment information.
- Root cause: not disclosed.
- Dexpose reports the Chaos ransomware group claimed the attack on 10 Sep 2026; the clinic did not name a group.
- The clinic said patient care was not affected, it worked with third-party forensic investigators and is notifying affected individuals by mail; the number affected was not stated.