type: incident · created: 2026-09-05 · updated: 2026-09-05 · tags: [incident, breach, healthcare, ransomware, third-party] · confidence: medium · affected_sectors: [healthcare] · au_impact: false
Two US Providers Report Cyber Incidents; Midwest Spine Hit by Third-Party Ransomware
HIPAA-breach notifications published this week cover two US providers. The Resource Center of Dallas, a Texas nonprofit, is notifying 12,500 patients about a cyber incident, and the Midwest Spine and Brain Institute, a Minnesota surgical practice, reported its operations were impacted by a ransomware attack that targeted third-party vendor 3C Care Systems, which handles its data.
| Attribute | Detail |
|---|---|
| Resource Center of Dallas | 12,500 patients (cyber incident) |
| Midwest Spine & Brain Institute | Operations impacted; ransomware at 3C Care Systems (third-party vendor) |
| Source | HIPAA Journal — Tier 2/4 |
The Midwest Spine case is another third-party-vendor ransomware incident: the surgical practice was affected via its data-handling vendor, underscoring the supply-chain exposure in healthcare.
Related Pages
- Resource Center Of Dallas Notifies 12 500 Patients About Cyber Incident — the Resource Center of Dallas notification