ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO
ent_019dea5e1790221ba9aa4b0fe17dfdfd
Disclosures
19
State AG · HHS OCR · Leak Site · 7 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
791,784
nationwide · State AG ME
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO
- Normalized
- ann robert h lurie children s hospital of chicago— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300CGD7YO50UECF92
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- luriechildrens.org
Disclosure history (19)newest first
- Illinois State AGas victim2026-08-01
ANN & ROBERT H LURIE CHILDREN'S HOSPITAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General in August 2026 (case 26-08-1379). The register records the breach as discovered on May 14, 2026. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2026-04-01
ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General in April 2026 (case 26-04-1111). The register records the breach as discovered on January 21, 2026. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2026-03-01
ANN & ROBERT H. LURIE CHILDREN’S HOSPITAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1045). The register records the breach as discovered on March 15, 2025. Personal information types reported: financial account number, medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2026-03-01
ANN & ROBERT H. LURIE CHILDREN’S HOSPITAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General in March 2026 (case 26-03-1044). The register records the breach as discovered on December 4, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Maine State AGas victim2024-06-27
Ann & Robert H. Lurie Children's Hospital of Chicago reported a cybersecurity attack occurring Jan 26-31, 2024. Cybercriminals accessed systems, impacting PII and PHI of 791,784 individuals, including 8 Maine residents. The hospital took systems offline, engaged forensic experts and law enforcement, and notified affected individuals on June 27, 2024, offering 24 months of credit monitoring.
- Massachusetts State AGas victim2024-06-27
Ann & Robert H. Lurie Children's Hospital of Chicago reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-27. 103 Massachusetts residents were affected.
- ILLINOISHHS OCRas victim2024-06-27
Ann & Robert H. Lurie Children's Hospital of Chicago reported to HHS on 2024-06-27 a Hacking/IT Incident affecting 775,860 individuals. Breached information located on Network Server. The cyberattack exposed PHI including names, addresses, DOB, SSN, driver's license, claims, financial info, diagnoses, lab results, and medications. The CE notified HHS, individuals, and media, and implemented additional technical safeguards.
- Indiana State AGas victim2024-06-27
Ann & Robert H Lurie Children's Hospital of Chicago reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-26 and was reported on 2024-06-27. 380 Indiana residents were affected. 791,784 individuals affected in total.
- California State AGas victim2024-06-27
Ann & Robert H. Lurie Children’s Hospital of Chicago reported a cybersecurity attack occurring between January 26 and January 31, 2024. The incident potentially impacted patient and employee data, including PHI, PII, and financial information. The hospital secured systems, engaged third-party experts, and implemented additional safeguards. Affected individuals are offered 24 months of Experian IdentityWorks.
- Vermont State AGas victim2024-06-27
Ann & Robert H. Lurie Children’s Hospital of Chicago disclosed a cybersecurity attack occurring Jan 26-31, 2024. Cybercriminals accessed systems, impacting PII and PHI. The hospital took systems offline, engaged forensic experts, and notified law enforcement. Affected individuals were offered 24 months of credit monitoring. No specific count of affected individuals was provided in the notice.
- Illinois State AGas victim2024-06-01
ANN & ROBERT H LURIE CHILDRENS HOSPITAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General in June 2024 (case 24-06-048). The register records the breach as discovered on January 26, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2024-02-27
Ann & Robert H. Lurie Children's Hospital of Chicago Ann & Robert H. Lurie Children's Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design.
- GLOBALLeak Siteas victim2024-01-31
Ann & Robert H. Lurie Children's Hospital of Chicago Ann & Robert H. Lurie Children's Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design.
- ILLINOISHHS OCRas reporting2023-08-08
Lurie Children’s Surgical Foundation reported to HHS on 2023-08-08 a Hacking/IT Incident affecting 1997 individuals. Breached information located on Network Server. A business associate experienced a cyber-attack compromising PHI including names, addresses, DOBs, and SSNs.
- Illinois State AGas reporting2023-01-01
LURIE CHILDREN'S SURGICAL FOUNDATION filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-531). The register records the breach as discovered on March 29, 2023. Additional entities named: NEXTGEN HEALTHCARE, INC. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- ILLINOISHHS OCRas victim2020-05-04
Ann & Robert H. Lurie Children's Hospital of Chicago reported to HHS on 2020-05-04 an Unauthorized Access/Disclosure affecting 4,824 individuals. Breached information located on Electronic Medical Record. An employee impermissibly accessed ePHI including names, addresses, DOB, diagnoses, lab results, and medications.
- Illinois State AGas victim2020-01-01
ANN & ROBERT H LURIE CHILDREN'S HOSPTAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-187). The register records the breach as discovered on March 5, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- ILLINOISHHS OCRas victim2019-12-26
Ann & Robert H. Lurie Children's Hospital of Chicago reported to HHS on 2019-12-26 an Unauthorized Access/Disclosure affecting 4,195 individuals. Breached information located on Electronic Medical Record. An employee impermissibly accessed PHI including names, addresses, DOBs, diagnoses, lab results, and medications. The hospital implemented additional safeguards and staff training.
- Illinois State AGas victim2019-01-01
ANN & ROBERT H. LURIE CHILDREN'S HOSPITAL OF CHICAGO filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-515). The register records the breach as discovered on October 19, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.