Lurie Children's Surgical Foundation

Lurie Children’s Surgical Foundation, a covered entity (CE), reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 1,997 individuals. The PHI involved included names, addresses, dates of birth, and Social Security numbers. The CE notified HHS and the media; the BA notified affected individuals. In its mitigation efforts, the CE provided complimentary credit monitoring services.