RUSH UNIVERSITY MEDICAL CENTER Reports Data Security Incident to Illinois AG

Rush University Medical Center, based in Illinois, has officially informed the Illinois Attorney General's office about a data security incident. The medical center submitted this formal notice on March 2, 2026. At the time of the filing, the incident remains under investigation.

The filing confirms that unauthorized access to systems at Rush University Medical Center occurred. While the exact types of personal information involved in this incident were not specified in the public record, individuals who received a notification letter from Rush University Medical Center would find more specific details about their potentially affected data. Such letters typically explain what information was involved.

Receiving a notification letter from Rush University Medical Center indicates that your personal information may have been compromised in this event. It is important to carefully read this communication, as it should outline the categories of your data that were affected and any services, such as credit monitoring or identity protection, that the medical center is offering.

To protect yourself, it is generally recommended to remain vigilant and monitor account statements for any unusual activity. Consider placing a fraud alert or security freeze on your credit reports with the three major credit bureaus. Be cautious of unsolicited communications that claim to be from Rush University Medical Center, especially those asking for personal details.