The Vermont Office of the Attorney General disclosed on June 27, 2024, that Ann & Robert H. Lurie Children’s Hospital of Chicago suffered a cybersecurity attack between January 26 and 31, 2024. The breach compromised personally identifiable information (PII) and/or protected health information (PHI) of individuals, though the exact number of affected parties remains undisclosed. As a pediatric hospital, the exposed data likely includes sensitive medical records of minors, heightening concerns over privacy violations, identity theft, and potential misuse of health data. The incident underscores vulnerabilities in healthcare cybersecurity, where attacks can disrupt patient care, erode trust, and trigger regulatory scrutiny under laws like HIPAA. The hospital has not confirmed whether ransomware was involved, but the leak of patient data—especially in a healthcare setting—poses severe reputational, financial, and operational risks. Recovery efforts may involve forensic investigations, notification processes, and strengthened security measures to prevent future intrusions.