This week ·
Twin Cities Pain Clinic
How they got in, as reported. Email made to look like it came from a trusted sender.
← All items this week- Date
- 14 Oct 2026
- Place
- United States
- Who
- Twin Cities Pain Clinic · Healthcare / Medical Clinic
- The way in
- Email impersonation
- Source
- HIPAA Journal
01 · What was reported
What was reported.
Twin Cities Pain Clinic agreed to settle class action litigation following a business email compromise attack in July 2025. The breach compromised the personal and protected health information of 3,572 patients.
The way in, as the source states it: email made to look like it came from a trusted sender.
02 · What we check for it
What we check for it.
Whether anyone can send mail that passes as your domain.
03 · Source
Source.
Source: HIPAA Journal ↗This page repeats what the source reported, with its date. It says nothing about any firm that is not named in it.