What Is This About?

If you received a letter or email about a data breach from Midwest Spine & Brain Institute, LLC (“MSBI”), a medical practice with locations in Minnesota and Wisconsin, your sensitive personal information or protected health information may have been compromised in a recent data breach. Our firm is investigating this incident and can help you understand your rights and potential legal options.

What Happened?

On or around November 21, 2024, a third-party vendor used by MSBI experienced a cyberattack that breached personal and protected health information of MSBI patients. The vendor, 3C Care Systems, LLC (“3C”), informed MSBI of the breach on an undisclosed date on or before February 2025. MSBI then opened an investigation with the assistance of external professionals experienced in handling this type of incident. 3C also conducted its own investigation with the assistance of external cybersecurity professionals. MSBI undertook a review which was completed on June 18, 2026. MSBI confirmed that its own larger network was not affected by the incident, but information relating to MSBI patients was present among the files accessed in the cyberattack on 3C.

MSBI reported the breach to the Massachusetts Office of Consumer Affairs and Business Regulation on August 14, 2026. MSBI has also posted a notice of the incident to its website. In its public notice, MSBI stated that its investigation of the affected files is ongoing, and that once it has identified the individuals affected by the breach, it will provide notice via U.S. mail.

What Information Was Impacted?

According to MSBI’s public disclosures, the following categories of information may have been compromised:

• Name;
• Date of birth;
• Social Security number;
• Medical treatment, procedure, and/or diagnosis information;
• Medical record number;
• Medical provider information;
• Medical prescription information;
• Dates of services; and
• Health insurance claim and/or policy information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.