Insomnia ransomware group leaks data stolen from NorthShore Health Centers in Northwest Indiana
NorthShore Health Centers, a nonprofit healthcare provider serving Porter, Lake, La Porte and Jasper Counties in Indiana, disclosed a cybersecurity incident that exposed patient personal and protected health information. The incident was detected on August 10, 2026, and the investigation found an unnamed unauthorized party had access to parts of the IT environment between August 10 and 11, 2026. The Insomnia ransomware group claimed responsibility, listed the organization on its dark web leak site and, after a ransom was apparently not paid, leaked the stolen data. The number of affected individuals has not been confirmed, and the data review was still ongoing as of the October 14, 2026 notice.
Detalhes técnicos
- The attacker had access to the network for about one day (August 10-11, 2026), and files containing patient information were potentially viewed or obtained.
- Data likely involved: names, Social Security numbers, medical treatment and condition information, and health insurance information.
- HIPAA Journal did not download the leaked data, but the file tree suggests patient data is in the leaked dataset.
- The initial access vector has not been disclosed.
Remediação
- Affected patients should place a fraud alert and credit freeze with a major credit reporting agency.
- Monitor financial accounts and explanation of benefits statements for misuse, and report suspected misuse promptly to the relevant institution (bank, insurer, etc.).
- NorthShore will mail notification letters once the data review concludes.
Linha do tempo
-
Insomnia ransomware group leaks data stolen from NorthShore Health Centers in Northwest Indiana
ler a análise desta fonte ocultar
NorthShore Health Centers, a nonprofit healthcare provider serving Porter, Lake, La Porte and Jasper Counties in Indiana, disclosed a cybersecurity incident that exposed patient personal and protected health information. The incident was detected on August 10, 2026, and the investigation found an unnamed unauthorized party had access to parts of the IT environment between August 10 and 11, 2026. The Insomnia ransomware group claimed responsibility, listed the organization on its dark web leak site and, after a ransom was apparently not paid, leaked the stolen data. The number of affected individuals has not been confirmed, and the data review was still ongoing as of the October 14, 2026 notice.
Technical Details
- The attacker had access to the network for about one day (August 10-11, 2026), and files containing patient information were potentially viewed or obtained.
- Data likely involved: names, Social Security numbers, medical treatment and condition information, and health insurance information.
- HIPAA Journal did not download the leaked data, but the file tree suggests patient data is in the leaked dataset.
- The initial access vector has not been disclosed.
Remediation
- Affected patients should place a fraud alert and credit freeze with a major credit reporting agency.
- Monitor financial accounts and explanation of benefits statements for misuse, and report suspected misuse promptly to the relevant institution (bank, insurer, etc.).
- NorthShore will mail notification letters once the data review concludes.