Every public data breach

47 disclosed this week · 26,367 on record

Rush System for Health

Disclosed Dec 21, 20234,961 affectedConfirmed

Official notice

The covered entity (CE), Rush System for Health, reported that an employee mailed the protected health information (PHI) of 4,961 individuals in a manner in which PHI was inadvertently disclosed. The PHI involved included names only. The CE notified HHS, affected individuals, and the media. In response to the incident, the CE sanctioned the responsible individual and strengthened its administrative safeguards to better protect PHI. Staff were retrained.

What is known

People affected4,961 (as reported to HHS)
DisclosedDec 21, 2023
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Rush System for Health