UnknownOtherAuthenticationHealth (basic)Government IDMedium

Saint Anthony Hospital

bd_5fbf557105f8a1c2 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 14, 2025

Filed

Sep 1, 2025

To disclose

—

Affected

Withheld by the regulator

Linked

5 filings

Confidence

95%

Full breach record for Saint Anthony Hospital →3 incidents on file

SAINT ANTHONY HOSPITAL filed a data-breach notice with the Illinois Attorney General in September 2025 (case 25-09-475). The register records the breach as discovered on July 14, 2025. Personal information types reported: medical information, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Jul 14, 2025

Discovered

Sep 1, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 578 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Illinois State AGbd_9818f8c94d9260b82025-09-01Candidate
South Carolina State AGbd_9e32c68d3e02309d2025-09-12 · +11dVerified
HHS OCRbd_bd345412deefdac22025-09-12 · +11dVerified
Indiana State AGbd_ff580f0efc3c9a182025-09-12 · +11dVerified

Name: Saint Anthony Hospital
norm: saint anthony hospital
Domain: sahchicago.org

Name: Saint Anthony Hospital
norm: saint anthony hospital
Domain: sahchicago.org
Industry: Otherllm

Discovered: Jul 14, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Withheld by the regulator
Data types: AuthenticationHealth (basic)Government ID
Data elements: Medical informationSocial Security numberUsername + password
Attack vector: Unknown

Compliance flags: Leak >180d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 3 states

View merged incident ↗

Illinois State AGSep 1 · first

Illinois State AGSep 1 · first · this page

South Carolina State AG+11d

HHS OCR+11d

Indiana State AG+11d

Pattern: first filing Sep 1 (IL), last Sep 12 (IN) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://databreachnoticetoattorneygeneral.illinoisattorneygeneral.gov/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2025
Raw hash: 87296f6fa8421991e26d52b292d10aa8db01b0454b00c4c4fb9d256176c9b108

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySaint Anthony Hospital

Victim entitySaint Anthony Hospital

Incidentdiscovered Jul 14, 2025

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedatabreachnoticetoattorneygeneral.illinoisattorneygeneral.gov