Oncology Institute says vendor cyberattack exposes patient data, operations continue

• The Oncology Institute disclosed that a cybersecurity incident at a software vendor led to unauthorized third-party access to certain company information systems, including systems affecting patient data, based on a May 20, 2026 notification from the vendor’s administrator Kroll.
• Operations continued in all material respects due to the company’s technology security and continuity plan.
• The incident was not expected to be material to operations, financial systems, or patient care as of the filing date, with the broader impact still under evaluation.
• Credit monitoring and protection is expected to be offered to impacted patients, with the company reserving rights to pursue potential claims against third parties.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. The Oncology Institute Inc. published the original content used to generate this news brief via EDGAR, the Electronic Data Gathering, Analysis, and Retrieval system operated by the U.S. Securities and Exchange Commission (Ref. ID: 0001079973-26-000721), on May 22, 2026, and is solely responsible for the information contained therein.