Sedgebrook, a senior living and skilled nursing company based in Illinois, fell victim to a cyberattack in May 2025. Unauthorized actors accessed its internal network between May 4–5, 2025, potentially exfiltrating sensitive files. A forensic review confirmed the breach involved personally identifiable information (PII) and protected health information (PHI), including names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account details, medical records, treatment data, and health insurance information. The company began notifying affected individuals in October 2025, offering free identity theft protection to those with exposed SSNs or driver’s licenses. The incident was also reported to the Massachusetts Attorney General’s office. The breach posed severe risks of identity theft, financial fraud, and medical privacy violations, particularly for vulnerable senior residents whose sensitive health and financial data was compromised.