Latest News
Security Incident 2026
What Happened
On or about December 23, 2025, IKRON experienced a data security incident affecting its network and operations. In February 2026, IKRON became aware of this incident, specifically discovering that an unauthorized third party gained access to certain IKRON servers and files, including internal documents and records, and extracted certain administrative or employment-related information associated with current and former IKRON employees.
On or about March 4th, IKRON became aware that a second unauthorized party infiltrated its network, gained access to an electronic health record environment used by IKRON, and extracted IKRON client health information from that environment, including certain protected health information associated with care provided by IKRON. Additionally, this unauthorized party extracted certain information associated with its clients’ vocational services.
Upon learning of the incidents, IKRON conducted a comprehensive review of the impacted files to identify the individuals involved and the types of information that may have been compromised. That review is ongoing and notice is being provided to those individuals.
What Information Was Involved
Based on the investigation to date, IKRON believes that the information subject to unauthorized access has varied by individual, depending on the individual’s involvement with IKRON. Across the impacted populations, the information may have included contact and demographic information, such as name, address, date of birth, Social Security number, and, in some cases, driver’s license number.
Specifically, for individuals who received patient-related services, the information may also have included medical record number, health insurance information, and clinical information relating to care, such as diagnoses, medical history, intake and assessment records, treatment plans, clinical notes, and appointment and billing information.
For individuals who participated in employment-related programs or services, the information may also have included program participation and service records, such as intake and enrollment information, appointment information, service-related notes or communications, and information relating to employment or vocational services, including education or work history; for certain individuals, limited medication information or general disability-related information associated with service plans may also have been involved.
What is IKRON Doing
Upon the discovery of the data incident, IKRON promptly reported the incidents to law enforcement, isolated the affected systems, disabled compromised accounts, reset passwords, assessed affected devices, deployed endpoint tools, and enhanced security monitoring. IKRON also engaged third-party cybersecurity professionals to remediate the incident and conduct a forensic investigation to determine the scope of the incident.
IKRON will be offering 12 months of complementary credit monitoring services to impacted individuals identified through the investigation. If you have reason to believe you have been impacted by this incident and would like additional information about these services, please contact IKRON at the toll-free number provided below.
What Impacted Individuals Can Do
Security experts have recommended that impacted individuals be vigilant against incidents of identity theft and fraud, review account statements, and monitor credit reports for suspicious or unauthorized activity. Additionally, impacted individuals contact their financial institution and all major credit bureaus to inform them of the breach and take whatever steps are recommended to protect their interests, including the possible placement of a fraud alert on their credit file.
For More Information
IKRON has established a dedicated, toll-free helpline to answer questions. Individuals may call 888-620-2701, Monday through Friday from 9 am - 6 pm Eastern Time.
0152017.0820593 4908-4798-4041v1