In March 2025, Genoa Community Hospital, locally known as Genoa Medical Facilities, discovered unusual activity in one of its employee email accounts. This triggered an immediate investigation, which revealed that some emails in the account may have been accessed or acquired by an unauthorized individual.
The hospital then conducted a thorough review to identify all individuals whose information could have been involved and to gather contact details for notification. This process concluded on July 8, 2025.
The breach potentially exposed information types such as names, dates of birth, Social Security numbers or other government ID numbers, financial account information, medical treatments or diagnosis information, and/or health insurance information.
At this time, Genoa Medical Facilities has not disclosed the exact number of individuals affected by the breach. The full notice to consumers is available in the official press release about the data security incident.
Genoa Medical Facilities has established a toll-free call center for questions and concerns related to the incident. The call center is available Monday through Friday from 9 a.m. to 5:30 p.m. Central Time, excluding holidays, and can be reached at 866-819-5406.
It is recommended to monitor financial accounts, review credit reports, and be attentive to any suspicious activity. Since Social Security numbers and other government IDs may have been involved, placing a fraud alert or credit freeze with the major credit bureaus can provide an extra layer of protection.
Additionally, those whose health insurance or medical information was involved should watch for any unfamiliar medical bills or insurance claims.
For more information, visit the Genoa Medical Facilities website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.