HackingHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHILowContained
ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO
bd_022e63521ff140fb · schema v1 · pii pii-v1
Full breach record for ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO →Ann & Robert H. Lurie Children's Hospital of Chicago suffered an external cybersecurity attack in which cybercriminals accessed hospital systems between January 26–31, 2024. The hospital took systems offline on January 31 including Epic EHR and MyChart. The breach was discovered on June 17, 2024. PII and PHI of patients and minors were impacted. 791,784 individuals were affected nationally; 8 Maine residents were affected. Experian IdentityWorks (24-month) was offered as remediation.
Leak gap clock⏱ Leak >90d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 148 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_52921f58da05d5adLeak Siterhysidafiled 2024-02-27(121d gap)Verified
- bd_2bd92d4f514d01f4Leak Siterhysidafiled 2024-01-31(148d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_4d5dd308bec3adc4HHS OCRfiled 2024-06-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/64c3b313-0c3c-4820-af10-6afef36d08e1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2024
- Raw hash
- 4edf267aec27fd940fb3181fdca55246a94113449e847b0615d39f3ce8669004
Reporting entity
- Name
- ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGOnorm: ann robert h lurie children s hospital of chicago
- Domain
- luriechildrens.org
- Industry
- Healthcare
Victim entity
- Name
- ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGOnorm: ann robert h lurie children s hospital of chicago
- Domain
- luriechildrens.org
- Industry
- Healthcare
- Industry
- Healthcarellm
Incident
- Discovered
- Jun 17, 2024
- Materiality determined
- —
- Notification sent
- Jun 27, 2024
- Affected individuals
- 8
- Data types
- PIIPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 17, 2024→ Filed with AG: Jun 27, 202410d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.