DuPage Medical Group

Profile narrative

DuPage Medical Group operates as a medical group delivering healthcare services to patients in the United States. The organization serves a patient population that includes individuals receiving diagnosis, treatment, and ongoing care. It collects and maintains personal health information such as names, contact details, medical diagnoses, procedure codes, treatment dates, and, for some patients, Social Security numbers. This data is used to support clinical decision‑making, care coordination, and administrative functions. The group’s headquarters is located in the United States of America.

In July 2021, DuPage Medical Group experienced a cyberattack that disrupted its network systems and compromised the data of over 655,000 patients. The breach exposed patient names, contact information, diagnosis and procedure codes, treatment dates, and Social Security numbers for a subset of those individuals, while no financial data was reported as affected. In response, the organization enlisted forensic specialists to investigate the incident, deployed additional security controls, and offered affected patients complimentary credit monitoring and identity theft protection services. Law enforcement authorities continue to investigate the attack, and DuPage Medical Group has stated that it is reviewing its security policies to strengthen defenses against future threats. These actions illustrate the organization’s focus on safeguarding protected health information and responding to security incidents.

Incidents

1 incident linked to this organisation.