THE UNIVERSITY OF CHICAGO MEDICAL CENTER

University of Chicago Medical Center (IL) reported to HHS on 2024-05-24 a Hacking/IT Incident (email phishing attack) affecting 10,332 individuals. Multiple employees were targeted in the phishing campaign. PHI exposed included names, dates of birth, Social Security numbers, passport numbers, driver's license/state ID numbers, financial information, diagnoses, medications, and health insurance/treatment information. Breached information located in Email. No business associate was involved. The CE offered credit monitoring and enhanced security safeguards; staff were retrained on email security.

Affected (this filing):

The University of Chicago Medical Center, a healthcare organization, reported an external system breach that occurred between January 4, 2024, and January 30, 2024. The breach was discovered on March 28, 2024, and affected 8 Maine residents. The compromised information includes names and Social Security Numbers. Affected individuals were notified on May 24, 2024, and offered 24 months of complimentary credit monitoring and identity protection services through Experian.

Affected (this filing): 8

University of Chicago Medical Center reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-04 and was reported on 2024-05-24. 1,463 Indiana residents were affected. 10,332 individuals affected in total.

Affected (this filing): 10,332