Ann & Robert H. Lurie Children's Hospital Of Chicago
Disclosed Jun 27, 20242 years ago775,860 affectedConfirmed
Ann & Robert H. Lurie Children’s Hospital of Chicago, the covered entity (CE), reported that it experienced a cyberattack that affected the protected health information (PHI) 775,860 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, claims and financial information, diagnoses and conditions, lab results, medications, and other treatment information. The CE notified HHS, the affected individuals, and the media. In its mitigation efforts, the CE implemented additional technical safeguards.
What is known
| People affected | 775,860 (as reported to HHS) |
|---|---|
| Disclosed | Jun 27, 2024 |
| Happened | Jan 26, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Ann & Robert H. Lurie Children's Hospital Of Chicagooag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-06-27 Ann & Robert H. Lurie Children's Hospital of Chicago Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Ann & Robert H. Lurie Children's Hospital of Chicago (Healthcare Provider, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 27, 2024 | |
| Vermont AGresidents of VT | Jun 27, 2024 | |
| HHS archivetotal | Jun 27, 2024 | 775,860 |
Other breaches at Ann & Robert H. Lurie Children's Hospital Of Chicago
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Dec 26, 2019Dec 26, 20196 years agoInsider | Dec 26, 20196 years ago | Insider | Healthcare | Confirmed | 4,824 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 775860 · backfill source
- 2026-09-25 · summary: empty to Ann & Robert H. Lurie Children’s Hospital of Chicago, the covered entity (CE), reported that it experienced a cyberattack that affected the protected health information (PHI) 775,860 individuals. The PHI involved included names, addresses, · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-06-27-ann-robert-h-lurie-childrens-hospital-chicago-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.
Everything about Ann & Robert H. Lurie Children's Hospital Of Chicago