University of Illinois Hospital and Health Sciences System data breach

Clerk's notes

The University of Illinois Hospital and Health Sciences System reported a data breach to the Indiana Attorney General on February 12, 2026. This incident, which originated on or about September 4, 2024, is currently under monitoring, indicating an ongoing review of its scope and impact.

The reported exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Billing and Financial Information. The combination of these data types can lead to various forms of identity theft and fraud.

Exposure of such detailed medical and personal data can create long-term risks. Individuals might face medical identity theft, where unauthorized parties use their information to obtain healthcare services or prescription medications. Additionally, the compromise of Social Security Numbers and financial details heightens the risk of traditional financial fraud and targeted phishing schemes.

Healthcare providers like the University of Illinois Hospital and Health Sciences System are legally obligated under federal and state frameworks, including HIPAA, to protect patient data with robust security measures. The occurrence of a breach involving this breadth of sensitive information raises questions about whether these required safeguards were adequately maintained to prevent unauthorized access.

Receiving an official data breach notification letter signifies that your personal and medical information was part of this compromise. Understanding your rights and potential next steps is important. Individuals who received notification of this breach may be eligible to seek a confidential review of their case.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.