Lutheran Social Services of Illinois

Lutheran Social Services of Illinois (LSSI) experienced a significant data breach that was disclosed to the public in early 2023. On January 27, 2022, LSSI discovered it had been the target of a ransomware attack. This cyber incident led to unauthorized access to files containing sensitive information maintained on the impacted systems. The breach affected over 184,000 individuals, compromising a variety of personal and health-related information. The data accessed by the unauthorized party included names, Social Security numbers, dates of birth, financial information, biometric information, driver’s license numbers, health insurance information, and medical diagnosis and treatment information.

Despite the breach, LSSI stated that there was no evidence to suggest that the information involved in the incident had been used for identity theft or financial fraud. In response to the breach, LSSI reviewed and revised its information security practices and bolstered existing security measures to reduce the likelihood of future incidents. The organization completed its data review on December 28, 2022, and began notifying affected individuals shortly thereafter

LSSI is a non-profit organization based in Des Plaines, Illinois, providing a wide range of social services across the state. Founded in 1867, it is one of the largest statewide social service providers, offering programs such as foster care, mental health services, alcohol and drug treatment, affordable senior housing, and residential programs for more than 42,000 Illinois residents each year. The organization employs over 686 people and generates approximately $71 million in annual revenue