NorthShore Health Centers, a nonprofit healthcare provider in Northwest Indiana, disclosed that an unauthorized party accessed its network in August 2026 and likely viewed patient files containing names, Social Security numbers, and health information. A ransomware group has claimed responsibility and leaked stolen data. Affected patients should place a credit freeze and monitor their accounts and insurance statements closely.
| Company | NorthShore Health Centers |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Names, Social Security Numbers, Medical Treatment Information, Health Insurance Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the NorthShore Health Centers Data Breach?
NorthShore Health Centers, a nonprofit healthcare provider serving patients across Porter, Lake, La Porte, and Jasper Counties in Northwest Indiana, has disclosed a cybersecurity incident that may have exposed patient information. The organization posted a notice on its website in October 2026 explaining what happened. According to that notice, unauthorized access to its network occurred in August 2026.
The investigation found that an unknown outside party gained access to parts of the organization’s IT systems over a short window in August 2026. During that time, the intruder may have viewed or copied files containing patient data. NorthShore Health Centers brought in outside cybersecurity and digital forensics specialists to help determine the scope of the intrusion.
As a result of the investigation, the healthcare provider confirmed that patient files were likely accessed. However, the full data review was still ongoing as of the October 2026 notice. A ransomware group has also claimed responsibility for the attack and listed NorthShore Health Centers on its dark web leak site. That group reportedly published stolen files after making ransom threats, though the exact contents of the leaked data have not been independently verified by outside parties.
Who was affected?
The breach may affect current and former patients of NorthShore Health Centers. Because the organization operates clinics throughout Northwest Indiana, the affected population likely includes residents of Porter, Lake, La Porte, and Jasper Counties. Patients of all ages could be involved, including minors who received care at any of its facilities.
NorthShore Health Centers has not yet confirmed the total number of people affected. The data review was still in progress at the time of the October 2026 notice. Therefore, the exact scope, including whether employees or only patients were affected, has not been publicly disclosed.
What Information Was Potentially Exposed?
NorthShore Health Centers indicated that certain categories of patient information were likely involved in this incident. Although the full assessment was not complete at the time of notification, the organization identified several types of data as probable targets. These categories include health-related and identifying information.
- Names
- Social Security numbers
- Medical treatment and condition information
- Health insurance information
When Social Security numbers are exposed alongside medical details, the risk of identity theft rises significantly. Criminals can use this combination to open fraudulent credit accounts, file false tax returns, or commit medical identity theft by using a victim’s insurance benefits. Because health data rarely changes, unlike a credit card number, the exposure can create risks that last for years.
In addition, health insurance information can be misused to obtain medical services or prescriptions under someone else’s name. This type of fraud can be difficult to detect right away. It may also corrupt a victim’s own medical records if fraudulent treatment gets mixed in with their real history. As a result, affected patients should watch both their financial accounts and their medical paperwork closely.
What is the company doing?
NorthShore Health Centers responded to the incident by launching an internal investigation and hiring third-party cybersecurity and forensics experts. This step allowed the organization to determine how the unauthorized party gained access and which systems were affected. The investigation into the full scope of the data involved was still underway as of October 2026.
Once the data review concludes, NorthShore Health Centers has said it will mail notification letters to affected individuals. This follow-up step will give patients specific information about what data of theirs may have been involved. In the meantime, the organization has published a general notice describing the incident and the likely categories of exposed information.
What Should Affected Individuals Do?
Place a Fraud Alert and Credit Freeze
Because Social Security numbers were likely involved, affected patients should consider placing a fraud alert or credit freeze with one of the three major credit bureaus. A fraud alert warns lenders to verify your identity before opening new credit. A credit freeze goes further by blocking access to your credit file entirely.
Either step can help stop criminals from opening new accounts in your name. You can request a freeze directly through Equifax, Experian, or TransUnion. This process is free and can be lifted temporarily whenever you need to apply for credit yourself.
Monitor Your Medical Records and Insurance Statements
Because health insurance information was likely exposed, patients should review their explanation of benefits statements carefully. Look for any services or claims you do not recognize. This could be a sign that someone used your insurance information fraudulently.
If you spot anything suspicious, contact your insurer right away. In addition, request copies of your medical records periodically to check for inaccurate entries. Catching medical identity theft early can prevent larger complications with your care and insurance coverage down the road.
Watch for Phishing Attempts
After a healthcare data breach, scammers often follow up with phishing emails, calls, or texts pretending to be from the breached organization. Be cautious of any message asking you to click a link or share personal details. NorthShore Health Centers will not request sensitive information this way.
Instead, verify any communication by contacting the organization directly through its official phone number or website. This simple step can prevent you from accidentally handing over additional personal data to a scammer posing as a legitimate contact.
Monitor Your Credit Reports Regularly
Affected individuals should check their credit reports from all three bureaus on a regular basis. You are entitled to a free report from each bureau annually through AnnualCreditReport.com. Reviewing these reports helps you catch unauthorized accounts or inquiries quickly.
If you notice unfamiliar activity, dispute it immediately with the credit bureau involved. Acting quickly can limit the damage and make it easier to resolve any fraudulent charges or accounts tied to your identity.
Consider Consulting a Data Breach Attorney
Given the sensitive nature of the data likely involved, affected patients may want to speak with an attorney who focuses on data breach cases. An attorney can help you understand your legal options and whether you may qualify for compensation. Many offer free initial consultations.
Because the investigation is still ongoing, it may take time before the full impact is known. However, documenting any financial or medical fraud you experience now can support a future claim if more details come to light.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.