2026 NorthShore Health Centers (Indiana) — IT intrusion Aug 10–11; patient files may have been viewed or taken; count not yet confirmed
Data compromised
Likely involved, still being assessed: names, Social Security numbers, information about medical treatment and conditions, and health insurance information. The number of people affected has not been confirmed.
Technical writeup
The notice (October 14, 2026) gives August 10 as the detection date, and says patient files may have been viewed or taken. HIPAA Journal reported the notice on October 27. No count has been published. Insomnia, a data-theft and extortion group active since October 2025, claimed the attack on its leak site; that claim is unverified. The NorthShore website notice itself was not retrieved, so the details rely on HIPAA Journal’s account. companyConfirmed true for the incident; the leak claim is unverified.
Root cause
The October 14, 2026 website notice says an unauthorised party had access to parts of the IT environment on August 10–11, 2026. The notice does not describe the entry route. The Insomnia data-theft and extortion group listed NorthShore on its leak site (logged September 7); the notice does not confirm that claim.