Chicago-based Sinai Health System is notifying 12,578 patients about a security incident that may have exposed their protected health information. In October 2019, the health system discovered that two employees had fallen victim to a phishing attack.