Lurie Children's Hospital data breach
Was I affected?
Lurie Children's Hospital confirmed a breach affecting about 791,784 people, exposing names, addresses, dates of birth and Social Security numbers. You or your child may be affected if treated at Lurie Children's before 2024 and you received a hospital letter in mid-2024.
| Announced | Jun 27, 2024 |
|---|---|
| When it happened | January 26-31, 2024 |
| People affected | 791,784 |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Medical information and Health insurance details |
| Status | Confirmed by the company or a regulator filing |
What happened
Ann & Robert H. Lurie Children's Hospital of Chicago was hit by the Rhysida ransomware group in January 2024, knocking out its records system and patient portal for weeks. In June it began notifying about 792,000 patients and others that names, addresses, service dates, health claims details and Social Security numbers may have been taken. The hospital said it did not pay a ransom.
What should I do?
- For affected children, ask each credit bureau to create and freeze a credit file in the child's name.
- Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
- Read every Explanation of Benefits from your health insurer and report any visit, test or prescription you never had.
- Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
Check the other services you use →
Sources
- Chicago children's hospital says 791,000 impacted by ransomware attack · SecurityWeek (news)
- Chicago children's hospital data breach from ransomware attack · The Record (news)