Morrison Community Hospital Breach

Based in Illinois, Morrison Community Hospital (MCH) has suffered a data breach. Serving more than 20,000 visits annually, the hospital is a significant resource for rehabilitation and clinical treatments. Those same residential patients may have had significant data loss during this breach.

What Was the Breach?

• Full Name
• Address
• Birthday
• Social Security Number
• Medical Record Number
• Health Insurance Policy 
• Medical History 
• Medical Diagnosis and Treatment

How Did the Breach Occur?

The breach involved an unauthorized party gaining access to the MCH network environment. There is no public information about how the assailants made the attack possible; however, third-party forensic experts have begun investigations into the event.

When Did This Breach Occur?

The consumer notification letter submitted to the Montana Attorney General’s office states the breach occurred around September 24th, 2023. The next notable date is around November 6th—when the subsequent investigation into the breach concluded. Immediately after this, MCH presumably began sending impact notices.

Who Does the Breach Impact?

The notices do not indicate what parties may face the consequences of this breach; however, it’s most likely patients and employees that will feel the impact. Associates of MCH must take action to safeguard their information; financial, credit, identity, and medical accounts must all receive active monitoring for suspicious activity.

How Many Files Does the Breach Affect?

Around 26,000 records were stolen, based on the breach filing published with the US Department of Health. Given the significant impact potential, all individuals connected to MCH should consider preventative data defenses. Start with monitoring services, and then secure and update all associated accounts.