Sinai Health System

Sinai Health System is a Chicago‑based healthcare provider that operates as a health system delivering medical services to patients in the region. The organization provides care to individuals seeking treatment and adheres to standard healthcare regulations governing patient privacy and safety. Its primary mission is to deliver quality healthcare while maintaining the confidentiality of personal health information. Sinai Health System serves the local community and operates within the Chicago metropolitan area. The organization’s structure enables it to respond to clinical needs and administrative requirements.

In October 2017, Sinai Health System experienced a phishing attack that compromised two employee email accounts, potentially exposing information of approximately 11,350 individuals. The organization detected the incident within hours, launched an investigation with external experts, and found no evidence that financial data was accessed. Although it could not confirm whether patient information was viewed, the health system assessed the exposure risk as low and notified affected individuals, offering them one year of complimentary credit monitoring. A second incident occurred on December 19, 2019, when unauthorized access to two employee email accounts was discovered, potentially exposing patient names, addresses, dates of birth, Social Security numbers, health records, and insurance details. Forensic analysis found no evidence that data was removed, misused, or disseminated, yet the provider engaged external specialists, reset passwords, conducted employee training, enhanced email security, and revised policies to strengthen protections. Both incidents prompted Sinai Health System to reinforce its safeguards and reiterate its commitment to protecting patient privacy.