International Society for Heart and Lung Transplantation data breach

Clerk's notes

On April 3, 2025, the International Society for Heart and Lung Transplantation (ISHLT) reported a data security incident to authorities in Massachusetts. The organization indicated that unauthorized actors may have gained access to its digital systems. This event is currently under investigation to determine its full scope and impact.

ISHLT is a prominent, multidisciplinary professional organization involved in heart and lung failure research and patient care. Due to its specialized role in medical research, clinical registry management, and professional membership, ISHLT handles extensive databases containing sensitive records, including various forms of personal information. This information is critical to the organization's operations, linking healthcare professionals, researchers, and patients.

While the exact types of information exposed are still being investigated, a breach involving an organization of this nature often carries significant risks. If your personal information was compromised, it could potentially lead to various forms of misuse. Affected individuals should remain vigilant regarding their accounts and communications following such an event.

Organizations like the International Society for Heart and Lung Transplantation are subject to stringent legal and regulatory frameworks for data protection, including state data protection laws in Massachusetts and, where applicable to clinical registries, federal standards like the Health Insurance Portability and Accountability Act (HIPAA). These laws require robust cybersecurity safeguards to protect the sensitive information they maintain. A successful breach suggests that these baseline obligations may not have been fully met, potentially leaving digital defenses vulnerable.

If you receive a formal data breach notification letter from the International Society for Heart and Lung Transplantation, it indicates that your confidential information was compromised due to this security incident. Receiving such a notification establishes a basis for potential legal action to hold the organization accountable for failing to protect your privacy. Our firm is actively investigating claims related to this incident.

Affected individuals do not need to demonstrate financial loss or identity theft to explore legal options; the exposure of your sensitive data itself can create a compensable injury under the law. We offer a free case review to help you understand your rights and potential next steps. There are no out-of-pocket costs or attorney fees unless we successfully recover compensation on your behalf.

If a notification letter about this breach reached you, see every Massachusetts data breach on file or browse all cases.