Every public data breach

44 disclosed this week · 26,355 on record

University of Chicago Medical Center

Disclosed May 27, 20222,568 affectedConfirmed

Official notice

The covered entity (CE), University of Chicago Medical Center, reported that several employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of approximately 2,568 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, health insurance information, diagnoses and conditions, lab results, and medications. The CE notified HHS, the affected individuals, and the media. The CE ’s mitigation efforts included strengthening its administrative, technical, and security safeguards.

What is known

People affected2,568 (as reported by the organization)
DisclosedMay 27, 2022
HappenedMar 24, 2022
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

Other breaches at University of Chicago Medical Center

History of this record
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
summary2026-09-25
empty to The covered entity (CE), University of Chicago Medical Center, reported that several employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of approximately 2,568 individuals. The PHIby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about University of Chicago Medical Center