Almeida Law Group is investigating a data breach at Open Door Health Center of Illinois. If you were affected, contact Almeida Law Group.
About Open Door Health Center of Illinois
Open Door Health Center of Illinois is a 501(c)(3) nonprofit community health organization based in Elgin, Illinois, with a second facility in Aurora. Founded in 1977, it provides family practice, internal medicine, infectious disease, and behavioral health services, with a particular focus on HIV/AIDS prevention, treatment, and care, confidential STI testing and treatment, mental health and substance abuse counseling, and services for the LGBTQ community. Because the organization serves patients with highly sensitive health conditions, any unauthorized access to its systems carries an elevated risk of serious harm to the people it serves.
What Happened?
Open Door Health Center of Illinois was listed in an HHS Office for Civil Rights breach portal report submitted on July 18th, 2026. The filing describes the incident as a hacking/IT incident involving a network server, with 501 individuals reported as affected and no business associate involved. Note that a count of exactly 501 is sometimes used by HIPAA-covered entities as a placeholder when the full scope of an incident is still under investigation.
Separately, the ransomware group Incransom claimed responsibility for a cyberattack against Open Door Health Center on May 25th, 2026, according to leak-site monitoring services Ransomware.live and DeXpose. According to DeXpose, the group claimed that sensitive data, including medical records and personal information, could be exposed unless negotiations were initiated. These are attacker-side allegations from a ransomware leak site and have not been confirmed by the organization or any regulator as an actual ransomware incident. HendryAdrian.com also documented the Incransom claim, noting it was based on publicly posted assertions by the ransomware group. No official notice letter or public statement from Open Door Health Center of Illinois has been found. The HHS filing lists the organization’s state as “WA,” but all other available sources confirm the organization operates exclusively in Illinois; this appears to be a data entry error in the filing.
Key Facts at a Glance
- Company or Organization: Open Door Health Center of Illinois
- Industry: Healthcare / Community Health Center / Nonprofit
- Location: Elgin, Illinois (with additional location in Aurora, Illinois)
- Incident type: Hacking/IT Incident — Network Server
- Date breach discovered: July 18th, 2026
- Date of consumer notification: July 18th, 2026 (HHS breach submission date)
- Total persons affected: 501 (may be a placeholder pending full investigation)
- Source: HHS Office for Civil Rights breach portal report; DeXpose – Incransom claim; Ransomware.live listing; HendryAdrian.com – Ransom! Open Door Health Center (MAY-2026)
What Should You Do?
If you received notice that your information was involved in this incident, take steps now to protect yourself. Enroll in any identity protection services offered by the organization before the stated deadline. Place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your credit reports for free at AnnualCreditReport.com. Watch your financial accounts closely for unfamiliar charges or activity. If your health information was affected, review your Explanation of Benefits statements and request copies of your medical records to check for services you did not receive. Report any suspected fraud or identity theft to the Federal Trade Commission at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
