Rede e arquivos do Minnesota Epilepsy Group · Breach

Minnesota Epilepsy Group breach affects 82,574 people

Nov 12, 2026 · 1 min read

An unauthorized third party accessed parts of Minnesota Epilepsy Group's network in August 2026. The incident affected 82,574 people, and it is unclear whether it is related to the earlier attack. The organization secured its network and launched an internal investigation.

By HIFY Radar newsroom Updated 11/12/2026 06:02 PM Get this every day →← Back to the feed 2 sources

HighBreachNo software to update

In 30 seconds

Alleged

Minnesota Epilepsy Group reportedly began mailing notices on October 16 after determining that an unauthorized party accessed parts of its network on August 10. The incident affected 82,574 people and may have exposed personal and health information, including Social Security numbers for some individuals.

What happened

Alleged

The organization detected the activity on August 10, secured its network and opened an investigation, according to HIPAA Journal. A review of affected files reportedly concluded on September 17 that personal and protected health information had been compromised.

Why it matters

Inferred

The combination of identity details, insurance information and medical records could create risks beyond ordinary account fraud. It may help someone impersonate a patient or misuse highly private health information, especially when a Social Security number was involved.

What to do

Inferred

Anyone who receives a notice should check which information the letter says was involved and use the offered identity-protection services if eligible. The available account says complimentary credit monitoring was offered to people whose Social Security numbers were exposed.

Confirmed and still uncertain

Alleged

At the time notices were issued, no misuse of patient data had reportedly been identified. It remains unclear whether the August incident is connected to the earlier 2026 network intrusion, and the evidence supplied here does not identify the intruder or explain the access method.

What people are saying

Observed

HIPAA Journal characterized the event as Minnesota Epilepsy Group's second cyberattack of 2026, and a Reddit post repeated that framing. The evidence batch contains no direct statement from the organization or affected patients, so these accounts should not be treated as independent confirmation of every detail.

Evolution

Alleged

The earlier incident reportedly involved unauthorized access from March 16 through April 10 and affected 80,061 people. Four months after that access ended, the group detected the August 10 incident affecting 82,574 people, confirmed the data impact on September 17 and began mailing notices on October 16.

Reach

Observed

2 independent groups, 2 updates, and 0 engagements. Observed communities: r/pwnhub.

Technical detail

Alleged

The reported access was limited to unspecified parts of the network. Data varied by person and could include a name together with an address, date of birth, Social Security number, medical treatment information or health insurance information; no malware, vulnerability or initial access route is identified in the supplied evidence.

Sources and evidence

Observed

The evidence consists mainly of a HIPAA Journal report plus a Reddit post that summarizes and links back to that coverage. Because no breach notice, regulatory filing or forensic report from Minnesota Epilepsy Group is included, incident details and remediation claims remain attributed rather than independently verified here.