Where does the MERCYHEALTH case file come from?

Every entry is taken from the breach report MERCYHEALTH lodged with the Illinois Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: MERCYHEALTH Data Breach

This file collects the dated facts on record for the MERCYHEALTH incident. The state report is dated August 15, 2025.

Timeline

August 15, 2025Report filed in IllinoisDate the notice was lodged with the Illinois Attorney General.

Case facts

Filing state: Illinois
Date reported: August 15, 2025
Receiving office: Illinois Attorney General

Case notes

MERCYHEALTH, operating in Illinois, submitted a formal data breach notification to state regulators on August 15, 2025. The public filing indicates an incident involving personal information, which is currently under active investigation.

The specific details concerning how this breach occurred or the exact categories of personal information affected have not been made public in the initial report. The record refers generally to 'personal information' being involved without specifying types.

Furthermore, the number of individuals who may have been impacted by this MERCYHEALTH data incident has not been disclosed in the publicly available documents at this time.

Individuals concerned about their data should remain vigilant for any unusual activity across their online accounts or financial statements. It is always prudent to monitor credit reports and consider placing a fraud alert or security freeze on credit files as a general precaution.

This information is derived solely from public regulatory filings with the state of Illinois. Updates will be provided as additional confirmed details become available from official sources.

Questions about this case file

Where does the MERCYHEALTH case file come from?: Every entry is taken from the breach report MERCYHEALTH lodged with the Illinois Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Illinois data breaches

Filing source: Illinois Attorney General

Named in the MERCYHEALTH breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Illinois case files