Midwest Spine and Brain Institute reported unauthorized access to systems managed by its third-party vendor, 3C Care Systems LLC. The investigation determined that systems containing personal and protected health information were accessed on or around November 21, 2024. MSBI determined this on June 18, 2026, and an August 14, 2026 report was submitted to the Massachusetts Office of Consumer Affairs and Business Regulation. The exposed information included Social Security numbers, names, and medical records. The total number of affected individuals has not been publicly disclosed. The available sources do not state when consumer notification occurred, and further details may be provided in later notices or filings.