Northwestern Memorial Healthcare data breach (2017–2021)

Identity resolution

Canonical name: NORTHWESTERN MEMORIAL HEALTHCARE
Normalized: northwestern memorial healthcare— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300SYNDSEG3SY2U05
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (3)newest first

ILHHS OCRas victim2021-06-25
Northwestern Memorial HealthCare reported to HHS on 2021-06-25 a Hacking/IT Incident affecting 201,197 individuals. Breached information located on Network Server. The breach involved a business associate and exposed PHI including names, SSNs, and diagnoses. The entity provided credit monitoring and terminated the business relationship.
ILHHS OCRas victim2020-08-28
Northwestern Memorial HealthCare reported to HHS on 2020-08-28 a Hacking/IT Incident (ransomware) affecting 55,983 individuals. The covered entity's business associate experienced a ransomware attack affecting ePHI stored on a Network Server. Exposed information included names, addresses, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.
MIHHS OCRas victim2017-04-03
Memorial Healthcare (MI) reported to HHS OCR on 2017-04-03 an Unauthorized Access/Disclosure affecting 685 individuals. Business associate RevSpring inadvertently mailed PHI to wrong recipients. Breached information located on Paper/Films. PHI involved included names, account information, treatment information, and financial information. The CE notified HHS, affected individuals, and the media. Credit monitoring was offered; RevSpring implemented administrative safeguards; CE revised its BA agreement per OCR corrective action assurances.

Subsidiary disclosures (1)filed by group companies

◈ These filings were made by or about subsidiaries of NORTHWESTERN MEMORIAL HEALTHCARE — not by NORTHWESTERN MEMORIAL HEALTHCARE itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.

Tracked subsidiaries✦ Northwestern Memorial Hospital

ILHHS OCRvia Northwestern Memorial Hospital2020-12-30
Northwestern Memorial Hospital (IL) reported to HHS on 2020-12-30 an Unauthorized Access/Disclosure affecting 682 individuals. A workforce member impermissibly accessed ePHI stored in Electronic Medical Records, including names, dates of birth, addresses, medications prescribed, and additional clinical/treatment information. The CE notified HHS, affected individuals, the media, and state and federal regulators. Post-breach, the responsible workforce member was sanctioned and staff were retrained.