OSF HEALTHCARE SYSTEM
bd_642aeb97e779372a · schema v1 · pii pii-v1
Full breach record for OSF HEALTHCARE SYSTEM →10 incidents on fileOSF HealthCare System notified patients of a security incident where unauthorized access occurred between March 7 and April 23, 2021. The breach affected patient data including names, SSNs, driver's licenses, and PHI at two Illinois medical centers. OSF engaged forensic investigators, notified law enforcement, and offered 12 months of Experian IdentityWorks.
J jump to incidentP pin to compareR raw source
Incident timeline
Mar 7, 2021
Begins
Apr 23, 2021
Discovered
Oct 1, 2021
Filed
vs. sector median
+10 wks slower
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitexinglockerbd_f8ace411af1e1abf2021-05-18 · +136dVerified by operator
Regulatory filings (7) · sorted by filing gap
- Massachusetts State AGbd_b288deb4577e5ece2021-10-01Verified
- HHS OCRbd_bf20565c237987762021-10-01Verified by operator
- Illinois State AGbd_14299358f0ba63fe2021-01-01 · +273dVerified by operator
- Illinois State AGbd_c91f7fe398e530012021-01-01 · +273dVerified by operator
Show 3 more filings ↓Show fewer ↑up to 1762d gap
- Montana State AGbd_08d288f3d1ac951e2020-10-19 · +347dCandidate
- HHS OCRbd_83807d832a08bc802020-10-19 · +347dVerified
- HHS OCR enforcementbd_7fbc6210e9c1f4d52026-07-29 · +1762dVerified by operator
Filing propagation · 8 filings · 3 states
View merged incident ↗Pattern: first filing Oct 19 (MT), last Jul 29 — a 2109-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.