Sedgebrook OpCo SL VII LLC, the operator of a senior living community in Lincolnshire, Illinois, recently experienced a data breach that may have compromised the personal information of its residents and employees. The breach was discovered in May 2025 and involved unauthorized access to sensitive files containing various forms of personal data.
Sedgebrook’s Data Breach Investigation
Sedgebrook first detected suspicious activity on its computer network on May 5, 2025. After noticing unusual behavior, the company initiated an internal investigation to assess the scope of the breach and protect its systems. In addition, Sedgebrook notified law enforcement and hired a forensic security firm to assist in determining the cause and impact of the breach.
The investigation revealed that an unauthorized third party had gained access to Sedgebrook’s network between May 4 and May 5, 2025. During this time, certain files were encrypted, and it is believed that the unauthorized party may have acquired sensitive personal data.
By August 26, 2025, Sedgebrook confirmed that the compromised files contained a wide array of sensitive information, including names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account numbers, treatment information, medical record numbers, and health insurance details. The breach exposed not only personal but also medical information, placing affected individuals at significant risk of identity theft, fraud, and medical privacy violations.
Once the breach was fully assessed, Sedgebrook began the process of notifying impacted individuals. The notification, which began on October 24, 2025, was sent to those who had a valid mailing address on file. While the breach may have affected a significant number of people, the total scope of the breach is still under review, and the full extent of the exposure may not yet be fully known.
When Did This Breach Occur?
- Unauthorized access detected: May 5, 2025
- Data breach period: May 4 to May 5, 2025
- Investigation and confirmation completed: August 26, 2025
- Notification letters mailed: October 24, 2025
What Information Was Breached?
- Names
- Addresses
- Dates of birth
- Social Security numbers
- Driver’s license numbers
- Financial account numbers
- Treatment information
- Medical record numbers
- Health insurance details
What You Can Do
If you were notified by Sedgebrook that your personal information was exposed in this breach, there are several steps you can take to protect yourself:
- Monitor your credit reports for unfamiliar activity or unauthorized accounts.
- Place fraud alerts or freezes on your credit file to prevent the unauthorized use of your information.
- Keep a close eye on your financial accounts for signs of fraudulent transactions or new accounts opened in your name.
- Review medical bills and statements to ensure no false charges were made using your health information.
- Enroll in identity theft protection services if available, and consider additional monitoring for your medical and financial records.
Taking immediate action can help you mitigate the risks associated with a data breach, but you may also be entitled to compensation for the damages caused by the exposure of your personal information.
