Chicago Family Health Center, a nonprofit Federally Qualified Health Center serving medically underserved communities on Chicago’s south side, has disclosed a data breach affecting approximately 90,000 individuals. Healthcare providers that collect and store sensitive personal and medical records have a responsibility to protect that information, and when a breach occurs, the people affected deserve clear answers and support.
Chicago Family Health Center’s Data Breach Investigation
Founded in 1977, Chicago Family Health Center provides a wide range of healthcare services, including primary medical care, dental care, behavioral health services, OB/GYN and prenatal care, pediatric care, vaccines, and HIV and STI testing and treatment, to underserved and uninsured communities on Chicago’s southeast and southwest sides. In the course of delivering these services, the health center collects and stores detailed personal and medical records for the patients it serves.
The breach was disclosed to the U.S. Department of Health and Human Services’ Office for Civil Rights on June 22, 2026, the federal system used to report breaches of unsecured protected health information under HIPAA. The health center has not yet publicly disclosed the specific cause of the breach or the exact categories of information involved for any individual patient.
Community health centers and other healthcare providers are frequent targets for cyberattacks and data breaches because they store large volumes of protected health information, or PHI, in centralized systems, including diagnoses, treatment records, prescription information, and health insurance details. This type of information is especially valuable to criminals because it can be used not only for traditional identity theft and financial fraud, but also for medical identity theft, insurance fraud, and highly convincing follow-up phishing scams that reference a patient’s own medical history.
Federally Qualified Health Centers like Chicago Family Health Center often serve large patient populations with limited administrative resources dedicated to cybersecurity, which can make timely detection and notification more difficult even when the organization intends to act promptly once a breach is discovered. As is common with healthcare data breaches, the full scope of what happened and exactly which data elements were involved may not be finalized until affected individuals begin receiving formal notification letters.
When Did This Breach Occur?
Chicago Family Health Center reported the breach to the U.S. Department of Health and Human Services on June 22, 2026. The exact date the underlying incident occurred or was first discovered has not been publicly disclosed at this time.
What Information Was Breached?
Chicago Family Health Center has not yet publicly confirmed the specific data elements affected in this breach. Reporting on the incident indicates the information at risk may include names, Social Security numbers, dates of birth, addresses, government-issued identification numbers, medical information, and financial information. Affected individuals should watch for an official notification letter describing exactly what information about them was involved.
What You Can Do
If you receive a notice that your information may have been affected by this breach, consider the following steps:
- Read any notification letter carefully and follow the specific guidance it provides.
- Monitor your financial accounts, insurance explanation-of-benefits statements, and credit reports for unfamiliar activity.
- Consider placing a fraud alert or credit freeze with the three major credit bureaus.
- Enroll in any free credit monitoring or identity protection services offered as a result of the breach.
- Be cautious of unsolicited calls, texts, or emails referencing this breach, your medical care, or your insurance, since criminals often use breach news to run follow-up phishing scams.
- Use strong, unique passwords and enable two-factor authentication on your accounts.
File a Data Breach Lawsuit Against Chicago Family Health Center
If your personal or medical information was exposed in the Chicago Family Health Center data breach, you may have legal options available to you. Healthcare organizations that collect and store sensitive patient information are expected to take reasonable steps to protect it, and when a breach like this occurs, affected individuals may be entitled to compensation.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
