Skip to content

illumifin

Disclosed Mar 10, 20266 months ago43,152 affectedConfirmed

Official notice

What is known

People affected43,152 (as reported by the organization)
DisclosedMar 10, 2026
DiscoveredNov 4, 2025
HappenedNov 4, 2025
AttackHacking
Data exposedNames, Health, Social Security numbers, Insurance, Dates of birth, Addresses
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: illumifinoag.ca.gov · Official notice
Oregon DOJ breach notice: illumifinjustice.oregon.gov · Official notice
HHS OCR breach report: illumifin (Business Associate, MN)ocrportal.hhs.gov · Official notice
Texas Attorney General data security breach report BR-0004951: illumifinoag.my.site.com · Official notice
Indiana Attorney General 2026 data breach report: Illumifinin.gov · Official notice

Notices filed

WhereFiledPeople
HHS OCRtotalMar 105,385
California AGresidents of CAMar 31
Indiana AGresidents of INMar 313,107
Texas AGresidents of TXApr 26,724
Oregon DOJresidents of ORApr 2297,781
History of this record
  • 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-7_2026.pdf · backfill source
  • 2026-09-25 · records: 41948 to 43152 · backfill source
  • 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","insurance","dob","addresses"] · backfill source
  • 2026-09-25 · records_basis: hhs to organization · backfill source
  • 2026-09-25 · records: 5385 to 41948 · backfill source
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 5385 · backfill source
  • 2026-09-25 · disclosed: 2026-03-31 to 2026-03-10 · backfill source
  • 2026-09-25 · discovered: empty to 2025-11-04 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about illumifin

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.