Rush data breach may include Social Security numbers from thousands of patients

SHARE Rush data breach may include Social Security numbers from thousands of patients

A data breach at Rush University Medical Center involved the personal information of about 45,000 patients. | Kevin Tanaka/For Sun-Times Media

About 45,000 Rush University Medical Center patients may have had personal information compromised in a data breach, according to the health system.

An employee of one of Rush’s financial services vendors “improperly disclosed” a file containing certain patient information to an unauthorized party, Rush spokesperson Deb Song said.

The exposed data may include a patient’s name, address, date of birth, Social Security number and health insurance information, Song said.

No medical history, treatment, diagnosis or personal financial information was shared, however, she added.

Rush discovered the breach on Jan. 22 and launched an internal investigation. The contract with the claims processing vendor was also suspended, according to a quarterly operations report.

The health system is “not aware of any misuse of information arising out of this incident,” the report says, but Rush provided notice to patients and the Department of Health and Human Services’ Office of Civil Rights.

Rush is offering a yearlong membership to an identity protection service for those affected.

The Latest
The actor said on Instagram that she and her husband were on their way to a school conference when they helped children escaping the Covenant School shooter to safety.
Proposed legislation would let the Transportation Security Administration ban people convicted or fined for assaulting or interfering with airline crew members.
Fire officials said the high-speed crash occurred on West Columbus Avenue at 83rd Street. Three people are in serious to critical condition, and one is in traumatic arrest.
Senators voted 66-30 to repeal the 2002 measure that gave President Bush the green light to invade Iraq and the 1991 authorization that sanctioned the U.S.-led Gulf War.
The Senate Finance Committee finds that troubled Credit Suisse failed to report secret accounts held by U.S. citizens trying to avoid paying taxes.