HackingHealthcareHealthcareCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
THE UNIVERSITY OF CHICAGO MEDICAL CENTER
bd_cb7140429490406e · schema v1 · pii pii-v1
Full breach record for THE UNIVERSITY OF CHICAGO MEDICAL CENTER →The University of Chicago Medical Center reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on March 24, 2022. The breach was also discovered on the same day. The incident affected 2 Maine residents, exposing their names and Social Security Numbers. The medical center provided written notification to the affected individuals on May 27, 2022, and offered two years of complimentary credit monitoring and identity protection services through Kroll.
Maine clockDiscovered Mar 24, 2022 → Filed with AG May 27, 202264d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9e22c09f8a6a0244Montana State AGfiled 2022-05-27Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b6ca5766-95c0-4c27-9528-b992765c0cc7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 27, 2022
- Raw hash
- 7b34ec6828dd5f623184d57e5b6b03692a71f4c91797a285c5635efc2b97f339
Reporting entity
- Name
- THE UNIVERSITY OF CHICAGO MEDICAL CENTERnorm: the university of chicago medical center
- Domain
- uchicagomedicine.org
Victim entity
- Name
- THE UNIVERSITY OF CHICAGO MEDICAL CENTERnorm: the university of chicago medical center
- Domain
- uchicagomedicine.org
- Industry
- Healthcarellm
Incident
- Discovered
- Mar 24, 2022
- Materiality determined
- —
- Notification sent
- May 27, 2022
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- ME AG >30d · 64dME resident >60d · 64d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 24, 2022→ Filed with AG: May 27, 202264d 30 days (soft) ME AG >30d Maine Discovered: Mar 24, 2022→ Notified: May 27, 202264d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.