HackingData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO
bd_f01d8d4f32bfa404 · schema v1 · pii pii-v1
Full breach record for ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO →Ann & Robert H. Lurie Children’s Hospital of Chicago disclosed a cybersecurity attack occurring Jan 26-31, 2024. Cybercriminals accessed systems, impacting PII and PHI. The hospital took systems offline, engaged forensic experts, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring. No specific count of affected individuals was provided in the notice.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by rhysida about this victim predates this filing by 148 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8f4e71a1b5b1e03aIndiana State AGfiled 2024-06-27Verified
- bd_a10306c02fabcbf9California State AGfiled 2024-06-27Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-27-ann-robert-h-lurie-childrens-hospital-chicago-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2024
- Raw hash
- c0cbf8856d8cd77a5c027f29302c0e7c780c3ef28758ce01e6f2063789ed3d90
Reporting entity
- Name
- ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGOnorm: ann robert h lurie children s hospital of chicago
- Domain
- luriechildrens.org
Victim entity
- Name
- ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGOnorm: ann robert h lurie children s hospital of chicago
- Domain
- luriechildrens.org
Incident
- Discovered
- Jan 31, 2024
- Materiality determined
- —
- Notification sent
- Jun 27, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(148 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.