The RUSH UNIVERSITY MEDICAL CENTER Data Breach: Incident Facts and Free Case Review
Rush University Medical Center is a prominent academic healthcare provider that manages extensive patient care, research, and clinical services. As a medical institution, they collect and store highly sensitive personal information, including detailed medical histories, insurance details, and government-issued identification required for treatment and billing purposes. This data breach was officially reported to the Illinois Attorney General in 2025, triggering a formal notification process for those impacted. If you have received a data breach notification letter, it indicates that your personal or health-related information may have been involved in this security incident. We recommend reviewing the letter carefully to understand the specific scope of the exposure and the identity protection services being offered by the medical center.
- State
- Illinois
- Reported
- December 23, 2025
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Related data breach cases
- The University Of Illinois College Of Medicine - Chicago
- Abbott Cancer Diagnostics (Formerly Known As Exact Sciences)
- Aspire Rural Health System
- EVERSANA LIFE SCIENCES SERVICES
- EduPath Learning Platform
- Suncloud Health
- FRANKLIN & VAUGHN, LLC
- MIDLAND CARE CONNECTION INC
- Taubensee Steel & Wire Company
- OPERATION PAR INC.
- ENDEAVOR HEALTH
- Carle Health- Carle Foundation Hospital
- FOX VALLEY TAX SOLUTIONS
- Stephen Mathias & Co