THE UNIVERSITY OF CHICAGO MEDICAL CENTER

The University of Chicago Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-05-24. 48 Massachusetts residents were affected.

University of Chicago Medical Center (IL) reported to HHS on 2024-05-24 a Hacking/IT Incident (email phishing attack) affecting 10,332 individuals. Multiple employees were targeted in the phishing campaign. PHI exposed included names, dates of birth, Social Security numbers, passport numbers, driver's license/state ID numbers, financial information, diagnoses, medications, and health insurance/treatment information. Breached information located in Email. No business associate was involved. The CE offered credit monitoring and enhanced security safeguards; staff were retrained on email security.

The University of Chicago Medical Center, a healthcare organization, reported an external system breach that occurred between January 4, 2024, and January 30, 2024. The breach was discovered on March 28, 2024, and affected 8 Maine residents. The compromised information includes names and Social Security Numbers. Affected individuals were notified on May 24, 2024, and offered 24 months of complimentary credit monitoring and identity protection services through Experian.

University of Chicago Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-04 and was reported on 2024-05-24. 1,463 Indiana residents were affected. 10,332 individuals affected in total.

THE UNIVERSITY OF CHICAGO MEDICAL CENTER - CHICAGO, IL filed a data-breach notice with the Illinois Attorney General in May 2024 (case 24-05-056). The register records the breach as discovered on January 4, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

University of Chicago Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2022-03-24 and was reported on 2022-05-27. 305 Indiana residents were affected. 2,568 individuals affected in total.

University of Chicago Medical Center reported to HHS on 2022-05-27 a Hacking/IT Incident affecting 2568 individuals. Breached information located on Email. Employees were subjects of an email phishing scheme compromising PHI including names, addresses, DOB, SSNs, and medical data.

University of Chicago Medical Center notified Montana AG of an email security incident (March 24-31, 2022) where unauthorized access to employee accounts exposed patient names and health information (diagnoses, prescriptions). The company terminated access, engaged cybersecurity providers, and enhanced authentication and monitoring.

The University of Chicago Medical Center reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on March 24, 2022. The breach was also discovered on the same day. The incident affected 2 Maine residents, exposing their names and Social Security Numbers. The medical center provided written notification to the affected individuals on May 27, 2022, and offered two years of complimentary credit monitoring and identity protection services through Kroll.

University of Chicago Medical Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2015-03-03. 36 Massachusetts residents were affected. The report records the breach type as electronic.

University of Chicago Medical Center notified NH AG of a cyber-attack on Dec 25, 2014, discovered Jan 22, 2015. Unauthorized access to a database exposed names, SSNs, and employee IDs of 5 NH residents. Access was restricted immediately. Remediation included penetration testing and policy updates. Affected individuals received 1 year of credit monitoring.