NorthShore Confirms Unauthorized Access; Insomnia Ransomware Claims Attack
NorthShore Health Centers, a nonprofit healthcare provider in Northwest Indiana, US, confirmed that an unauthorized third party accessed parts of its IT environment between August 10 and 11, 2026, and may have viewed or obtained patient files. According to HIPAA Journal, the Insomnia ransomware group claimed the incident and added the organization to its dark web leak site. The data review is ongoing and notification letters will be mailed to affected individuals.
What happened
NorthShore Health Centers detected suspicious network activity on August 10, 2026. The investigation determined that an unauthorized third party accessed parts of its IT environment between August 10 and 11, 2026, and may have viewed or obtained patient files. The number of affected individuals is not yet confirmed.
Why it matters
Information likely involved includes names, Social Security numbers, medical treatment and condition details, and health insurance data. The case creates notification duties, regulatory risk, and patient trust risk. According to HIPAA Journal, the Insomnia ransomware group claimed the attack, which points to a threat of data publication.
What to do
Track the completion of the data review and the letters NorthShore will mail to affected individuals. Monitor the Insomnia group's dark web leak site. Advise current and former patients to watch their accounts and communications.
For the technical team
- Affected
- NorthShore Health Centers (provedora de saúde sem fins lucrativos que atende pacientes no noroeste da Indiana, EUA); amb · IT environment of NorthShore Health Centers, a nonprofit provider serving patients in Porter, Lake, La Porte, and Jasper Counties in Northwest Indiana, US.
- Exploitation
- Access occurred between August 10 and 11, 2026. HIPAA Journal reports that the Insomnia ransomware group claimed the incident, added the organization to its dark web leak site, and threatened to publish the data. NorthShore has not confirmed the attribution.
- Fix
- No software fix cited. The investigation relies on external cybersecurity and digital forensics experts and remains ongoing, along with the data review.
- Vector
- Unauthorized third-party access to parts of the organization's IT environment, detected through suspicious network activity on August 10, 2026. The initial compromise vector was not disclosed.
- More details
- Notice posted on NorthShore's website on October 14, 2026. Data types still under assessment; names, Social Security numbers, medical treatment and condition information, and health insurance data are likely involved. Notification letters will be mailed once the data review concludes. Number of affected individuals unconfirmed.
Timeline
Incident opened.
Sources 1 source
- Data Breach Announced by NorthShore Health Centers HIPAA Journal
