HackingCustomer Data InvolvedIDENTITY_GOVERNMENTMediumContained
THE UNIVERSITY OF CHICAGO MEDICAL CENTER
bd_6f1b677e1645896e · schema v1 · pii pii-v1
Full breach record for THE UNIVERSITY OF CHICAGO MEDICAL CENTER →The University of Chicago Medical Center, a healthcare organization, reported an external system breach that occurred between January 4, 2024, and January 30, 2024. The breach was discovered on March 28, 2024, and affected 8 Maine residents. The compromised information includes names and Social Security Numbers. Affected individuals were notified on May 24, 2024, and offered 24 months of complimentary credit monitoring and identity protection services through Experian.
Maine clockDiscovered Mar 28, 2024 → Filed with AG May 24, 202457d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_579dc4b435838e45HHS OCRfiled 2024-05-24Verified
- bd_95695ad34ba421f9Indiana State AGfiled 2024-05-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4de2bac3-a7ba-4ce0-a67e-cfc87d4178d3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2024
- Raw hash
- 0c04d3bffe47d1b6b976e68f3770a9edb6e54fcca17ed658d0f7c7b29cee8f73
Reporting entity
- Name
- THE UNIVERSITY OF CHICAGO MEDICAL CENTERnorm: the university of chicago medical center
- Domain
- uchicagomedicine.org
Victim entity
- Name
- THE UNIVERSITY OF CHICAGO MEDICAL CENTERnorm: the university of chicago medical center
- Domain
- uchicagomedicine.org
Incident
- Discovered
- Mar 28, 2024
- Materiality determined
- —
- Notification sent
- May 24, 2024
- Affected individuals
- 8
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 28, 2024→ Filed with AG: May 24, 202457d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.