Two Major Healthcare Data Breaches Expose Sensitive Patient Information
Heart Care Centers of Illinois (HCCI) disclosed a phishing attack on July 18, 2026, revealing that an unauthorized third party accessed an employee’s email account between August 22, 2024, and November 6, 2024. The breach was discovered on January 15, 2026, during an investigation into an unsuccessful phishing attempt. A forensic review completed on June 11, 2026, confirmed exposure of highly sensitive data, including names, Social Security numbers, medical records, insurance details, and financial information. Affected patients were notified on July 10, 2026, and offered credit monitoring services. HCCI has since strengthened security protocols, though the total number of impacted individuals remains undisclosed.
Separately, Madera Community Hospital in California reported a network intrusion occurring between May 28 and May 29, 2025. While no direct evidence of data exfiltration was found, the hospital acknowledged that files may have been acquired by a third party. A data review concluded in April 2026 identified exposed information, including names, birthdates, Social Security numbers, financial details, and limited medical and biometric data. Notifications were sent to affected individuals, who were also provided credit monitoring services. The full scope of the breach has yet to be reported to the HHS’ Office for Civil Rights.
Source: https://www.hipaajournal.com/heart-care-centers-of-illinois-data-breach/
Madera Community Hospital cybersecurity rating report: https://www.rankiteo.com/company/madera-community-hospital
Heartland Health cybersecurity rating report: https://www.rankiteo.com/company/heartland-health
"id": "MADHEA1784809735",
"linkid": "madera-community-hospital, heartland-health",
"type": "Breach",
"date": "8/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Illinois, USA',
'name': 'Heart Care Centers of Illinois (HCCI)',
'type': 'Healthcare Provider'},
{'industry': 'Healthcare',
'location': 'California, USA',
'name': 'Madera Community Hospital',
'type': 'Hospital'}],
'attack_vector': ['Phishing Email', 'Network Intrusion'],
'customer_advisories': ['Credit monitoring services offered',
'Credit monitoring services offered'],
'data_breach': {'data_exfiltration': ['Unconfirmed', 'Possible'],
'personally_identifiable_information': ['Names, Social '
'Security numbers, '
'insurance details',
'Names, birthdates, '
'Social Security '
'numbers'],
'sensitivity_of_data': ['High', 'High'],
'type_of_data_compromised': ['Personal Identifiable '
'Information (PII), Medical '
'Records, Financial Information',
'Personal Identifiable '
'Information (PII), Medical and '
'Biometric Data']},
'date_detected': ['2026-01-15', '2025-05-29'],
'date_publicly_disclosed': ['2026-07-18'],
'date_resolved': ['2026-04-01'],
'description': 'Heart Care Centers of Illinois (HCCI) disclosed a phishing '
'attack that exposed sensitive patient data, including names, '
'Social Security numbers, medical records, insurance details, '
'and financial information. Madera Community Hospital in '
'California reported a network intrusion that may have '
'resulted in unauthorized access to similar sensitive data.',
'impact': {'brand_reputation_impact': ['High', 'High'],
'data_compromised': ['Names, Social Security numbers, medical '
'records, insurance details, financial '
'information',
'Names, birthdates, Social Security numbers, '
'financial details, medical and biometric '
'data'],
'identity_theft_risk': ['High', 'High'],
'legal_liabilities': ['Potential', 'Potential'],
'payment_information_risk': ['High', 'High'],
'systems_affected': ['Email System', 'Hospital Network']},
'initial_access_broker': {'entry_point': ['Employee Email Account', None]},
'investigation_status': ['Completed', 'Completed'],
'post_incident_analysis': {'corrective_actions': ['Strengthened security '
'protocols',
None],
'root_causes': ['Phishing attack leading to email '
'compromise',
'Network intrusion']},
'references': [{'source': 'Cyber Incident Report'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA', 'HIPAA'],
'regulatory_notifications': ['Pending (HHS’ Office '
'for Civil Rights)',
'Pending (HHS’ Office '
'for Civil Rights)']},
'response': {'communication_strategy': ['Patient notifications sent on '
'2026-07-10',
'Notifications sent to affected '
'individuals'],
'containment_measures': ['Strengthened security protocols', None],
'incident_response_plan_activated': ['Yes', 'Yes'],
'remediation_measures': ['Credit monitoring services offered',
'Credit monitoring services offered'],
'third_party_assistance': ['Forensic Review', None]},
'title': 'Two Major Healthcare Data Breaches Expose Sensitive Patient '
'Information',
'type': ['Phishing Attack', 'Network Intrusion'],
'vulnerability_exploited': ['Employee Email Account Compromise']}