Iroquois Memorial Hospital Data Breach Exposes SSNs and Medical Information

Iroquois Memorial Hospital, a community hospital in Watseka, Illinois, disclosed more than one data breach in 2026.

In August, the hospital reported a breach stemming from its vendor Aesto LLC, a health care data migration and archiving company. In October, it began notifying individuals of a separate breach involving its own computer network.

On Nov. 10, 2025, Iroquois Memorial Hospital discovered suspicious activity in its computer network. An unauthorized third party accessed parts of the network at times between Oct. 8 and Nov. 15, 2025, and may have accessed and taken hospital files. On Aug. 28, 2026, a review of the files found that they contained personal information. The hospital began mailing notice letters on Oct. 14, 2026.

The PEAR ransomware group claimed responsibility for the attack on a dark web site on Dec. 11, 2025.

The data potentially compromised as a result of the incident included names, addresses, dates of birth, Social Security numbers, driver's license and other government ID numbers, financial information, medical treatment or diagnosis information and health insurance information.

The breach impacted 1,279 individuals in Texas and 281 in Massachusetts.

Iroquois Memorial Hospital additionally reported the breach to the U.S. Department of Health and Human Services on Jan. 9, 2026, as well as the attorneys general offices of New Hampshire and Vermont.

Iroquois Memorial Hospital's response to the breach

Iroquois Memorial Hospital is offering individuals whose Social Security numbers may have been involved a free one-year membership in Epiq Privacy Solutions ID 3B Credit Monitoring. Enrollment instructions and an activation code are included in the notice letter.

A call center is available for questions Monday through Friday from 9 a.m. to 9 p.m. Eastern time. The number is listed in the notice letter.