Oncology Institute, Inc. 8-K

What Happened

• Oncology Institute, Inc. filed a Current Report on Form 8-K updating a prior voluntary disclosure (filed Nov. 6, 2025) about a cybersecurity incident involving a software service provider (the “Vendor”).
• On May 20, 2026, Kroll (the Vendor’s third‑party administrator) notified the Company that the Vendor detected unauthorized access by a third party to certain Company information systems, including systems affecting patient data.
• The Vendor has set up a patient portal for information and inquiries; the Company says it will work with the Vendor to offer credit monitoring and protection to impacted patients. The Company states its operations have continued in all material respects and, as of the filing date, it believes the incident has not had a material impact on operations, financial systems, or quality of care.

Key Details

• Prior voluntary disclosure: Current Report on Form 8-K filed Nov. 6, 2025.
• New notification date: Kroll informed the Company on May 20, 2026 of unauthorized access affecting Company systems and patient data.
• Company response: Activated technology security and continuity plan; operations continue; plans to offer credit monitoring to impacted patients.
• Legal/financial posture: Investigation ongoing; Company is reserving all rights against relevant third parties and is evaluating any material impact on financial condition or results of operations.

Why It Matters

• For investors, this event raises potential legal, regulatory, reputational, and remediation cost risks noted by the Company in its filing. While the Company currently believes there is no material effect on operations or financials, the investigation is ongoing and outcomes could change that assessment.
• Key items for investors to watch: updates on the scope of data accessed, the number of affected patients, costs for remediation and credit monitoring, any regulatory inquiries or litigation, and disclosures about insurance coverage or financial impact.