Breachesby GlyphIllinois Bone & Joint Institute
Disclosed Aug 30, 2024665,321 affectedConfirmed
Illinois Bone & Joint Institute, the covered entity (CE), reported that it experienced a cyber-attack that affected the protected health information (PHI) of 665,321 individuals. The PHI involved included names, addresses, birthdates, Social Security numbers, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided free credit monitoring and implemented additional administrative and technical safeguards.
What is known
| People affected | 665,321 (as reported to HHS) |
|---|---|
| Disclosed | Aug 30, 2024 |
| Happened | May 30, 2024 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Illinois Bone & Joint InstituteVermont Attorney General: 2024-12-19 Illinois Bone and Joint Institute Data Breach Notice to ConsumersVermont Attorney General: 2024-08-30 Illinois Bone and Joint Institute Data Breach Notice to ConsumersHHS OCR breach report (archive, resolved): Illinois Bone & Joint Institute (Healthcare Provider, IL)
Notices filed
History of this record
other to healthby backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 665321by backfillSource
empty to Illinois Bone & Joint Institute, the covered entity (CE), reported that it experienced a cyber-attack that affected the protected health information (PHI) of 665,321 individuals. The PHI involved included names, addresses, birthdates, Sociaby backfillSource
2024-12-19 to 2024-08-30by backfillSource
empty to https://ago.vermont.gov/document/2024-12-19-illinois-bone-and-joint-institute-data-breach-notice-consumersby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.