Did University of Illinois Hospital and Health Sciences System have a data breach?

Answer

Yes. University of Illinois Hospital and Health Sciences System reported a data breach to the Indiana Attorney General on February 12, 2026.

View the official filing

What the filing says

Reported to: Indiana Attorney General
Filing date: February 12, 2026
Breach date: September 4, 2024
People affected: Not stated in the filing

Information involved

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Billing and Financial Information

In plain terms

The University of Illinois Hospital and Health Sciences System filed a data breach report in Indiana on February 12, 2026. This incident, which occurred on September 4, 2024, involved the exposure of various types of sensitive patient information. Individuals who were patients of the system should review any notifications received and take protective measures.

The University of Illinois Hospital and Health Sciences System submitted a data breach notification to Indiana authorities on February 12, 2026. This report concerned an incident that took place on September 4, 2024. The filing indicates an unspecified type of security incident led to the compromise of patient data.

According to the official filing, the exposed information included Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Billing and Financial Information. These details were reported as part of the public record.

The exposure of such sensitive personal and medical data carries potential risks. This type of information could be used for various forms of identity theft, medical fraud, or other malicious activities if it falls into the wrong hands. Individuals affected by the breach should remain vigilant regarding their personal accounts and records.

To help protect themselves, affected individuals are generally advised to carefully review their financial statements and explanation of benefits (EOB) from their health insurer for any unauthorized activity. Monitoring credit reports can also help detect suspicious new accounts or inquiries. Additionally, be cautious of unsolicited communications, as scammers may attempt to use breach information for phishing attacks.

It is important for those who receive direct notifications from the University of Illinois Hospital and Health Sciences System to read them carefully for specific guidance. These official communications will provide the most accurate information regarding the breach and recommended steps.

If you received a notification letter about this breach, you can compare it with other Indiana data breach filings or browse all cases.

Other filings by University of Illinois Hospital and Health Sciences System

Companies often file the same breach in several states. Each filing is listed separately.

Commonly recommended next steps

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Look up another company

Other breaches reported in Indiana

DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with University of Illinois Hospital and Health Sciences System.