Heart Care Centers of Illinois Data Breach Investigation

Heart Care Centers of Illinois, a physician-owned cardiovascular practice serving the Chicago area, has notified affected individuals of a data breach involving unauthorized access to an employee email account. According to the practice’s official notice, sensitive personal and protected health information belonging to an undisclosed number of individuals may have been compromised. Contact our data privacy lawyers to learn more.

Details of the Heart Care Centers of Illinois Data Breach

The practice discovered the security incident on January 15, 2026, while investigating a separate phishing incident. That review uncovered suspicious activity involving an employee email account. A forensic investigation later confirmed that an unauthorized actor had access to the account from August 22, 2024, through November 6, 2024.

Heart Care Centers of Illinois then retained a data analytics firm to determine the full scope of the breach and identify affected individuals. The review was not completed until June 11, 2026, resulting in a delay of more than 18 months between the initial unauthorized access and notification. Affected individuals began receiving notification letters on July 10, 2026.

Information Potentially Exposed in the Breach

Because the breach involved an email account rather than a central database, the information potentially exposed may vary by individual. According to the notification, the affected data may include:

• Full name, address, phone number, and fax number
• Social Security number
• Date of birth
• Driver’s license or state identification number
• Passport number
• Payment card and financial account information
• Medical treatment, condition, diagnosis, and prescription information
• Health insurance information

This combination of financial, personal, and medical information significantly increases the risk of identity theft, medical billing fraud, and targeted phishing attacks.

Why Hire The Lyon Firm for Your Heart Care Centers Data Breach Claim

Lengthy delays between unauthorized access and notification, as alleged in this incident, can leave individuals vulnerable to identity theft and fraud for extended periods. The Lyon Firm has represented clients in numerous healthcare data breach matters involving delayed notifications, email account compromises, and the exposure of Social Security numbers and sensitive medical information.

Our experienced attorneys understand how to evaluate whether a healthcare provider fulfilled its legal obligations to safeguard patient information and responded appropriately following a cybersecurity incident. If you were affected by the Heart Care Centers of Illinois data breach, you may have legal options beyond the credit monitoring services offered by the practice. Contact The Lyon Firm today for a free and confidential consultation to discuss your rights and explore your potential legal options.

‍

‍

This information presented is based on publicly available breach notifications and may be updated as additional facts become available. No claims are made regarding fault, negligence, or liability on the part of any company mentioned.