Data Breaches Hit Healthcare Organizations in IL and TX Impacting 600K Individuals

Post Views: 5

Data Breaches at US Healthcare Organizations

The recent data breach at three US healthcare organizations in Illinois and Texas has affected nearly 600,000 individuals.

Affected Organizations and Number of Individuals Impacted

North Texas Behavioral Health Authority: 285,000 individuals
Southern Illinois Dermatology: 160,000 individuals
Saint Anthony Hospital: 146,000 individuals

The largest breach, affecting 285,000 individuals, was disclosed by the North Texas Behavioral Health Authority, a mental health and substance abuse resource provider. According to the organization, they detected a network intrusion in October 2025, and an investigation showed that unauthorized individuals may have accessed and exfiltrated files containing personal information, including Social Security numbers.

According to the North Texas Behavioral Health Authority:”The breach was listed on the Insomnia ransomware group’s website in February 2026, with the group claiming to have stolen the information of 150,000 patients.”

Southern Illinois Dermatology, a skincare provider based in Salem, Illinois, became aware of a cybersecurity incident in late November 2025. An investigation completed in early March 2026 showed that files storing personal information were compromised.

According to Southern Illinois Dermatology:”We believe this incident may have resulted in unauthorized access to our patient records, including Social Security numbers and other sensitive information.”

Saint Anthony Hospital, a Chicago-based hospital, disclosed a security incident exposing the information of 146,000 people. The intrusion occurred in February 2025, when two employee accounts were compromised, exposing patients’ personal and health information.

According to Saint Anthony Hospital:”This incident is separate from a previous breach in January 2024, when the LockBit ransomware group listed the organization on its leak website.”

These data breaches highlight the importance of robust cybersecurity measures in healthcare organizations, particularly those handling sensitive patient information.