The MERCYHEALTH Data Breach: Reported Filing Facts
MercyHealth is a healthcare provider that manages comprehensive patient care, clinical services, and hospital operations. As a healthcare entity, the organization typically collects and stores highly sensitive personal information, including medical history, insurance details, and government-issued identification numbers required for treatment and billing purposes. In 2025, the company officially reported a data breach to the Illinois Attorney General, confirming that unauthorized access to their systems occurred. If you have received a formal data breach notification letter from MercyHealth, it indicates that your personal or protected health information was likely involved in this incident. This notification is intended to inform you of the event and provide guidance on the steps you should take to protect your identity and medical records from potential misuse.
- State
- Illinois
- Reported
- November 26, 2025
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Related data breach cases
- The University Of Illinois College Of Medicine - Chicago
- Abbott Cancer Diagnostics (Formerly Known As Exact Sciences)
- Aspire Rural Health System
- EVERSANA LIFE SCIENCES SERVICES
- EduPath Learning Platform
- Suncloud Health
- FRANKLIN & VAUGHN, LLC
- MIDLAND CARE CONNECTION INC
- Taubensee Steel & Wire Company
- OPERATION PAR INC.
- ENDEAVOR HEALTH
- Carle Health- Carle Foundation Hospital
- FOX VALLEY TAX SOLUTIONS
- Stephen Mathias & Co