Northwoods Surgery Center announced a network security incident that may have exposed patient information. The center identified unauthorized activity in September 2025, and files may have been accessible from July through early September 2025. Northwoods Surgery Center issued a press release on May 6, 2026, and notified the HHS OCR on May 8, 2026.
The breach affected 5,385 individuals. The exposed data includes patient names, addresses, dates of birth, Social Security numbers, patient identification/medical record numbers, health insurance information, doctor's name, practice type, medical date of service, medication information, diagnosis and treatment information, medical history, medical claims/billing information, and other protected health information. Although law firms are investigating, no class-action lawsuits have been filed.
Over time, details of the incident may become clearer, and additional notifications may be issued. Northwoods Surgery Center has offered complimentary credit monitoring to affected individuals.