Healthcare Data Breach Exposes Sensitive Information for 15 Months

Heart Care Centers of Illinois reported a data breach involving unauthorized access to an employee's email account from August 22, 2024, to November 6, 2024. The breach, discovered on January 15, 2026, resulted from a phishing attack and went undetected for over 15 months. Sensitive data potentially exposed includes Social Security numbers, medical records, and financial information. The organization engaged forensic specialists to investigate and completed a review of the compromised email account by June 11, 2026. Notifications to affected individuals began on July 10, 2026, and the organization is offering complimentary credit monitoring services. The incident highlights significant vulnerabilities in phishing detection and response capabilities within the healthcare sector.

Key Points: • Unauthorized access to an employee's email lasted over 15 months due to a phishing attack. • Sensitive data exposed includes Social Security numbers and protected health information. • Heart Care Centers of Illinois is offering free credit monitoring to affected individuals.