Notice to our Patients of a Privacy Incident

On March 5, 2020, we discovered that between November 1, 2018 and February 29, 2020 an employee may have accessed certain medical records without a work-related reason. We immediately terminated the employee’s access to Lurie Children’s systems and began a thorough investigation. As part of our investigation, we determined that the information viewed included some patients’ names, addresses, dates of birth, and medical information, such as diagnoses, medications, appointments, and procedures.

It is important to note that the employee did not have access to full Social Security numbers, insurance information, or financial account information, and we have no reason to suspect that there has been any misuse or public release of any patient information associated with this incident. We addressed this issue in accordance with our disciplinary policies, and the employee no longer works for the Hospital.

We want our patients to know that we are taking this matter very seriously. We began mailing letters to affected patients on May 4, 2020, and have established a dedicated call center to answer any questions patients or their families may have. If you believe you or your child are affected and do not receive a letter by May 25, 2020, please call 866-377-0046, Monday through Friday, 8 a.m. to 5:30 p.m. Central Time. It is always a good idea to review any statements you receive from your healthcare providers. If you see any services not received, please contact the provider immediately.

We deeply regret any inconvenience or concern this incident may cause our patients or their families. To help prevent something like this from happening in the future, we are retraining our staff regarding appropriate access to patient records and enhancing our monitoring capabilities.