Every public data breach

44 disclosed this week · 26,355 on record

UChicago Medicine Medical Group

Disclosed May 23, 202538,656 affectedConfirmed

Official notice

The covered entity (CE), UChicago Medicine Medical Group, reported that it was the subject of a cybersecurity incident that affected the protected health information of 38,656 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, claims information, diagnoses/conditions, and treatment information. The CE notified HHS, the affected individuals and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect its PHI.

What is known

People affected38,656 (as reported by the organization)
DisclosedMay 23, 2025
HappenedJul 5, 2024
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
summary2026-09-25
empty to The covered entity (CE), UChicago Medicine Medical Group, reported that it was the subject of a cybersecurity incident that affected the protected health information of 38,656 individuals. The PHI involved included names, Social Security nuby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about UChicago Medicine Medical Group