Every public data breach

47 disclosed this week · 26,367 on record

Advocate Medical Group

Disclosed Aug 23, 20134,029,530 affectedSettled

Official notice

Four stolen desktop computers held data on 4 million Advocate patients

Unencrypted desktop computers were stolen from an Advocate Medical Group administrative office in Illinois, exposing data of about 4 million patients. Advocate later paid a record $5.55 million HIPAA settlement covering this and other breaches.

What is known

People affected4,029,530 (as reported by the organization)
DisclosedAug 23, 2013
HappenedJul 15, 2013
AttackLost or stolen device
Data exposedNamesAddressesDates of birthSocial Security numbersHealthInsurance
SectorHealthcare · US
StatusSettled
Lawsuit or fine$5.55M HHS OCR HIPAA settlement (2016) (about $5.5M)

Sources

Notices filed

History of this record
status2026-09-25
confirmed to settledby seedSource
fine_usd2026-09-25
empty to 5550000by seedSource
lawsuit2026-09-25
empty to $5.55M HHS OCR HIPAA settlement (2016)by seedSource
attack2026-09-25
unknown to lost-deviceby seedSource
data_types2026-09-25
[] to ["names","addresses","dob","ssn","health","insurance"]by seedSource
records_basis2026-09-25
empty to organizationby seedSource
records2026-09-25
empty to 4029530by seedSource
summary2026-09-25
empty to Unencrypted desktop computers were stolen from an Advocate Medical Group administrative office in Illinois, exposing data of about 4 million patients. Advocate later paid a record $5.55 million HIPAA settlement covering this and other breacby seedSource
title2026-09-25
empty to Four stolen desktop computers held data on 4 million Advocate patientsby seedSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Advocate Medical Group