220,968 Americans Exposed As Major Data Breach Leaks Names, Addresses, Social Security Numbers, Medical Records and More

Hundreds of thousands of Americans are now at risk of identity theft and privacy violations after a serious security breach at a personal healthcare firm.

Kansas-based patient care firm Sunflower Medical Group says it witnessed a cybersecurity incident late last year affecting 220,968 Americans.

Sunflower says an “unknown third party” illegally accessed the firm’s database, copying customer records including names, addresses, dates of birth, Social Security numbers, driver’s license numbers and medical and health insurance records.

“On January 7th, 2025, Sunflower Medical Group, P.A. (‘Sunflower’) became aware of suspicious activity within its computer network. Sunflower promptly began an investigation, with the assistance of a leading cybersecurity firm. The investigation determined that an unknown third party accessed Sunflower’s systems on or about December 15th, 2024 and, during that time, acquired copies of files from Sunflower’s systems.”

Sunflower is a multi-specialty medical practice that offers primary and urgent care services as well as a slew of laboratory exams.

The firm says it abruptly sent letters to affected customers to inform them about the security incident while offering identity theft protection services to individuals whose Social Security or driver’s license numbers were compromised.

For now, Sunflower says that it is not aware of any incident involving the misuse of customer data.

The firm says affected users should stay vigilant and immediately report suspicious activities related to their personal or healthcare data.

Generated Image: Midjourney