Heart Care Centers of Illinois Data Breach Investigation

Heart Care Centers of Illinois, a physician-owned cardiovascular practice serving the Chicago area, has notified affected individuals of a data breach involving unauthorized access to an employee email account. According to the practice’s official notice, sensitive personal and protected health information belonging to an undisclosed number of individuals may have been compromised. Contact our data privacy lawyers to learn more about the situation and to file a claim.

Details of the Heart Care Centers of Illinois Data Breach

The practice discovered the security incident on January 15, 2026, while investigating a separate phishing incident, which uncovered suspicious activity involving an employee email account. A forensic investigation later confirmed that an unauthorized actor had access to the account from August 22, 2024, through November 6, 2024.

Heart Care Centers of Illinois then retained a data analytics firm to determine the full scope of the breach and identify affected individuals, which was completed on June 11, 2026, resulting in a delay of more than 18 months between the initial unauthorized access and notification.

Affected individuals began receiving notification letters on July 10, 2026.

Information Potentially Exposed in the Breach

Because the breach involved an email account rather than a central database, the information potentially exposed may vary by individual. According to the notification, the affected data may include:

• Full name, address, phone number, and fax number
• Social Security number
• Date of birth
• Driver’s license or state identification number
• Passport number
• Payment card and financial account information
• Medical treatment, condition, diagnosis, and prescription information
• Health insurance information

Why Hire The Lyon Firm for Your Heart Care Centers Data Breach Claim

Lengthy delays between unauthorized access and notification can leave individuals vulnerable to identity theft and fraud for extended periods. The Lyon Firm has represented clients in numerous healthcare data breach matters involving delayed notifications and the exposure of Social Security numbers and sensitive medical information, and our experienced attorneys understand how to evaluate whether a healthcare provider fulfilled its legal obligations to safeguard patient information and responded appropriately following a cybersecurity incident.

If you were affected by the Heart Care Centers of Illinois data breach, contact The Lyon Firm today for a free and confidential consultation to discuss your rights and explore your potential legal options.

‍

‍

This information presented is based on publicly available breach notifications and may be updated as additional facts become available. No claims are made regarding liability on the part of any company mentioned.