Ann & Robert H. Lurie Children's Hospital of Chicago

The Vermont Office of the Attorney General disclosed on June 27, 2024, that Ann & Robert H. Lurie Children’s Hospital of Chicago suffered a cybersecurity attack between January 26 and 31, 2024. The breach compromised personally identifiable information (PII) and/or protected health information (PHI) of individuals, though the exact number of affected parties remains undisclosed. As a pediatric hospital, the exposed data likely includes sensitive medical records of minors, heightening concerns over privacy violations, identity theft, and potential misuse of health data. The incident underscores vulnerabilities in healthcare cybersecurity, where attacks can disrupt patient care, erode trust, and trigger regulatory scrutiny under laws like HIPAA. The hospital has not confirmed whether ransomware was involved, but the leak of patient data—especially in a healthcare setting—poses severe reputational, financial, and operational risks. Recovery efforts may involve forensic investigations, notification processes, and strengthened security measures to prevent future intrusions.

Source: https://ago.vermont.gov/document/2024-06-27-ann-robert-h-lurie-childrens-hospital-chicago-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/ann-and-robert-h-lurie-children's-hospital-of-chicago

"id": "ann948091725",
"linkid": "ann-and-robert-h-lurie-children's-hospital-of-chicago",
"type": "Cyber Attack",
"date": "1/2024",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Healthcare',
                        'location': 'Chicago, Illinois, USA',
                        'name': 'Ann & Robert H. Lurie Children’s Hospital of '
                                'Chicago',
                        'type': 'Hospital'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_publicly_disclosed': '2024-06-27',
 'description': 'The Vermont Office of the Attorney General reported that Ann '
                '& Robert H. Lurie Children’s Hospital of Chicago experienced '
                'a cybersecurity attack between January 26 and 31, 2024. The '
                "incident impacted individuals' personally identifiable and/or "
                'protected health information, although the specific number of '
                'individuals affected remains unknown.',
 'impact': {'data_compromised': ['Personally Identifiable Information (PII)',
                                 'Protected Health Information (PHI)']},
 'references': [{'date_accessed': '2024-06-27',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Cybersecurity Attack on Ann & Robert H. Lurie Children’s Hospital '
          'of Chicago',
 'type': 'Cybersecurity Attack'}