Open Door Health Center of Illinois Hit by INC RANSOM Ransomware Attack, Exposing Sensitive Data
Open Door Health Center of Illinois, a nonprofit healthcare provider serving Aurora and Elgin since 1977, disclosed a data breach on July 18, 2026, following a ransomware attack claimed by the cybercriminal group INC RANSOM. The breach was first reported on the dark web on May 21, 2026, with attackers alleging they had exfiltrated sensitive data from the organization.
The health center, which specializes in primary care, sexual health, HIV/STI treatment, behavioral health, and support for underserved communities including LGBTQ+ populations operates clinics in Aurora (157 S. Lincoln Ave.) and Elgin (1665 Larkin Ave.). While the exact number of affected individuals remains undisclosed, the breach impacted hundreds of U.S. patients, potentially exposing personally identifiable information (PII) and protected health data. Specific details on the compromised data have not been publicly released.
The incident is under investigation by Shamis & Gentile P.A., a law firm specializing in data breach class actions, which is evaluating potential compensation for affected individuals. The attack underscores ongoing cybersecurity risks in the healthcare sector, particularly for organizations serving vulnerable populations.
Source: https://www.claimdepot.com/investigations/open-door-health-center-data-breach-2026
Open Door Health Center cybersecurity rating report: https://www.rankiteo.com/company/open-door-health-center
"id": "OPE1785868315",
"linkid": "open-door-health-center",
"type": "Ransomware",
"date": "5/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Hundreds of U.S. patients',
'industry': 'Healthcare',
'location': ['Aurora, Illinois', 'Elgin, Illinois'],
'name': 'Open Door Health Center of Illinois',
'type': 'Nonprofit Healthcare Provider'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health data']},
'date_detected': '2026-05-21',
'date_publicly_disclosed': '2026-07-18',
'description': 'Open Door Health Center of Illinois, a nonprofit healthcare '
'provider serving Aurora and Elgin since 1977, disclosed a '
'data breach on July 18, 2026, following a ransomware attack '
'claimed by the cybercriminal group INC RANSOM. The breach was '
'first reported on the dark web on May 21, 2026, with '
'attackers alleging they had exfiltrated sensitive data from '
'the organization. The health center specializes in primary '
'care, sexual health, HIV/STI treatment, behavioral health, '
'and support for underserved communities including LGBTQ+ '
'populations. The breach impacted hundreds of U.S. patients, '
'potentially exposing personally identifiable information '
'(PII) and protected health data.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health data',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'INC RANSOM'},
'references': [{'date_accessed': '2026-05-21', 'source': 'Dark web report'}],
'regulatory_compliance': {'legal_actions': 'Potential class action '
'evaluation'},
'response': {'third_party_assistance': 'Shamis & Gentile P.A. (law firm)'},
'threat_actor': 'INC RANSOM',
'title': 'Open Door Health Center of Illinois Hit by INC RANSOM Ransomware '
'Attack',
'type': 'Ransomware'}