Ann & Robert H. Lurie Children's Hospital of Chicago

The covered entity (CE), Ann and Robert H. Lurie Children’s Hospital of Chicago, reported that an employee impermissibly accessed the electronic protected health information (ePHI) of 4,824 individuals. The ePHI involved included names, addresses, dates of birth, diagnoses, lab results, and medications prescribed. The CE notified HHS, the media, affected individuals, and provided substitute notice on its website. In response to the breach, the CE sanctioned the employee responsible for the breach and implemented additional technical safeguards and retrained employees on the importance of safeguarding patient privacy.