What Is This About?

According to dark web monitoring sources, Mankato Clinic, a healthcare organization with multiple locations in the Mankato, Minnesota area, may have experienced a data breach allegedly carried out by the threat group known as Chaos. Our firm is investigating this incident and would like to speak with current and former patients of Mankato Clinic.

What Happened?

On or around September 10, 2026, dark web monitoring websites including Ransomware.live detected that the cybercriminal threat group known as Chaos had claimed a breach of Mankato Clinic’s systems in a post made to Chaos’ dark web leak site. Chaos claims to be in possession of 610 gigabytes (610 GB) of Mankato Clinic files.

As of publication, Mankato Clinic has not confirmed the alleged breach’s authenticity. Details of the alleged breach, such the full scope of potentially affected information and the number of potentially affected individuals, remain under investigation.

What Information Was Impacted?

While Mankato Clinic has not confirmed the alleged breach nor its associated details, based on the nature of ransom attacks on healthcare practices, the following categories of information may have been compromised:

• Names;
• Contact information;
• Sensitive personal identifiers such as Social Security number;
• Health insurance information;
• Health information such as info about medical treatment, condition, or diagnosis; and
• Other sensitive personal information and protected health information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you are a current or former patient of any Mankato Clinic provider or location, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.