UnknownOtherHealth (basic)Government IDMedium

Deaconess Health System

bd_4bda20dfe4268b02 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Feb 2, 2026

Filed

Mar 1, 2026

To disclose

—

Affected

Withheld by the regulator

Linked

6 filings

Confidence

95%

Full breach record for Deaconess Health System →5 incidents on file

DEACONESS HEALTH SYSTEM, INC. filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1080). The register records the breach as discovered on February 2, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Feb 2, 2026

Discovered

Mar 1, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by worldleaks about this victim predates this filing by 53 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteworldleaksbd_ee3310a1c914a30f2026-04-08 · +38dVerified by operator
Leak Siteworldleaksbd_50e717ff643a85692026-01-07 · +53dVerified by operator

Regulatory filings (3) · sorted by filing gap

HHS OCRbd_db347d72095d5b102026-03-20 · +19dVerified
Illinois State AGbd_e8a3fe09c3056b5c2026-08-01 · +153dVerified
Texas State AGbd_7ad004d4210ef67d2026-08-07 · +159dVerified by operator

Name: Deaconess Health System
norm: deaconess health system
Domain: deaconess.com

Name: Deaconess Health System
norm: deaconess health system
Domain: deaconess.com
Industry: Otherllm

Discovered: Feb 2, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Withheld by the regulator
Data types: Health (basic)Government ID
Data elements: Medical informationSocial Security number
Attack vector: Unknown

Compliance flags: Leak >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Illinois State AGMar 1 · first · this page

HHS OCR+19d

Illinois State AG+153d

Texas State AG+159d

Pattern: first filing Mar 1 (IL), last Aug 7 (TX) — a 159-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://databreachnoticetoattorneygeneral.illinoisattorneygeneral.gov/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 1, 2026
Raw hash: e21da83edac7b2644bed9ae55f886edf6c3b27f5754fa05669877473932fb714

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityDeaconess Health System

Victim entityDeaconess Health System

Incidentdiscovered Feb 2, 2026

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedatabreachnoticetoattorneygeneral.illinoisattorneygeneral.gov