UnknownOtherFinancial accountHealth (basic)Government IDMedium

Deaconess Health System

bd_e8a3fe09c3056b5c · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 26, 2026

Filed

Aug 1, 2026

To disclose

—

Affected

Withheld by the regulator

Linked

6 filings

Confidence

95%

Full breach record for Deaconess Health System →5 incidents on file

DEACONESS HEALTH SYSTEM filed a data-breach notice with the Illinois Attorney General in August 2026 (case 26-08-1370). The register records the breach as discovered on June 26, 2026. Personal information types reported: drivers license, financial account number, medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Jun 26, 2026

Discovered

Aug 1, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by worldleaks about this victim predates this filing by 206 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteworldleaksbd_ee3310a1c914a30f2026-04-08 · +115dVerified by operator
Leak Siteworldleaksbd_50e717ff643a85692026-01-07 · +206dVerified by operator

Regulatory filings (3) · sorted by filing gap

Texas State AGbd_7ad004d4210ef67d2026-08-07 · +6dVerified by operator
HHS OCRbd_db347d72095d5b102026-03-20 · +134dVerified
Illinois State AGbd_4bda20dfe4268b022026-03-01 · +153dVerified by operator

Name: Deaconess Health System
norm: deaconess health system
Domain: deaconess.com

Name: Deaconess Health System
norm: deaconess health system
Domain: deaconess.com
Industry: Otherllm

Discovered: Jun 26, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Withheld by the regulator
Data types: Financial accountHealth (basic)Government ID
Data elements: Driver's licence numberFinancial account numberMedical informationSocial Security number
Attack vector: Unknown

Compliance flags: Leak >180d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Illinois State AGMar 1 · first

HHS OCR+19d

Illinois State AG+153d · this page

Texas State AG+159d

Pattern: first filing Mar 1 (IL), last Aug 7 (TX) — a 159-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://databreachnoticetoattorneygeneral.illinoisattorneygeneral.gov/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: 2b5864f6e96ffc5d879ff49c41baa416d4bf33e13c6ae72906de8bb63739b68c

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityDeaconess Health System

Victim entityDeaconess Health System

Incidentdiscovered Jun 26, 2026

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedatabreachnoticetoattorneygeneral.illinoisattorneygeneral.gov