DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Cook County Health and Hospitals System terminates relationship with medical transcription service, notifying patients of breach

Posted on October 13, 2023 by Dissent

On September 24, Cook County Health and Hospitals System (CCH) in Illinois notified HHS of a breach. At the time, CCH reported that 500 patients were affected. The “500” entry is usually just a marker to indicate that the entity knows that they were required to notify HHS and individuals no later than 60 days from discovery of a reportable breach affecting more than 500 patients, but they do not yet really know how many people have been affected or need to be notified individually.

A notice on CCH’s website provides some details about a breach at an external vendor, Perry Johnson & Associates, Inc. (PJ&A). PJ&A previously provided medical transcription services for CCH.

On July 21, 2023, while still investigating their breach, PJ&A informed CCH there had been what was described as a “data security incident.” Their investigation found that in April 2023, an unauthorized individual had accessed PJ&A systems where CCH patient data was stored. CCH was notified on July 26, 2023 that personal information of CCH patients might have been affected.

CCH states that when they learned of the incident, “CCH stopped sharing data with PJ&A, and terminated its relationship with PJ&A.” CCH  states that they are one of many organizations impacted by the PJ&A data security incident, yet there is no notice of any breach on PJ&A’s website at this time and DataBreaches has yet to see any other breach disclosures naming them.  DataBreaches has sent an email inquiry to PJ&A seeking additional details.

On October 9, 2023, PJ&A provided CCH with the final list of affected patients. The types of protected health information appears to include names, and some combination of the following: dates of birth, addresses, medical record numbers, encounter numbers, medical information, dates/times of service and, in some records, Social Security numbers.

CCH states that they are reviewing the information and will be notifying impacted individuals as soon as possible. Their full notice can be found at https://cookcountyhealth.org/compliance-notice/

Patients who may have been affected and would like more information can call (888) 867-3881.

Category: Health DataSubcontractorU.S.

Post navigation

← Equifax’s U.K. Arm Fined Over 2017 Data Breach
Colonial Pipeline was hacked. No, wait, Accenture was hacked. No, wait….. untangling claims. (2) →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Possible ransomware attack disrupts Maine and New Hampshire Covenant Health locations
  • HHS OCR Settles HIPAA Security Rule Investigation of BayCare Health System for $800k and Corrective Action Plan
  • UK: Two NHS trusts hit by cyberattack that exploited Ivanti flaw
  • Update: ALN Medical Management’s Data Breach Total Soars to More than 1.8 Million Patients Affected
  • Russian-linked hackers target UK Defense Ministry while posing as journalists
  • Banks Want SEC to Rescind Cyberattack Disclosure Requirements
  • MathWorks, Creator of MATLAB, Confirms Ransomware Attack
  • Russian hospital programmer gets 14 years for leaking soldier data to Ukraine
  • MSCS board renews contract with PowerSchool while suing them
  • Iranian Man Pleaded Guilty to Role in Robbinhood Ransomware

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Home Pregnancy Test Company Wins Dismissal of Pixel Wiretapping Suit
  • The CCPA emerges as a new legal battleground for web tracking litigation
  • U.S. Spy Agencies Are Getting a One-Stop Shop to Buy Your Most Sensitive Personal Data
  • Period Tracking App Users Win Class Status in Google, Meta Suit
  • AI: the Italian Supervisory Authority fines Luka, the U.S. company behind chatbot “Replika,” 5 Million €
  • D.C. Federal Court Rules Termination of Democrat PCLOB Members Is Unlawful
  • Meta may continue to train AI with user data, German court says

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.