Illinois Bone and Joint Institute $4M Data Breach Settlement

Individuals who received a notice that their personal information may have been compromised in a data breach discovered by Illinois Bone and Joint Institute in July 2024, may be eligible to submit a claim up to $5,000 from a class action settlement. The cybersecurity incident impacted an estimated 568,000 current and former patients.

Illinois Bone and Joint Institute LLC has agreed to pay $4 million to settle a class action lawsuit that alleged negligence, breach of implied contract, unjust enrichment, invasion of privacy, and violations of the Illinois Consumer Fraud and Deceptive Business Practices Act. The plaintiffs claimed the data security incident that may have exposed sensitive personal and protected health information of hundreds belonging to thousands of individuals.

Who can file a data breach claim?

Class members are individuals who received a data breach notice from Illinois Bone and Joint Institute stating that their personal information may have been compromised in the July 2024 data breach.

How much will settlement payments be?

Class members can submit for one or more of the following benefits:

• Pro rata cash payment: All class members can submit to receive a pro rata cash payment, estimated at $50. Final payment amount will be determined by the total number of claims filed.
• Reimbursement of out-of-pocket losses: All class member can claim up to $5,000 in unreimbursed costs directly traceable to the data incident. This includes monetary losses due to identity theft or fraud, credit monitoring costs or fees for freezing/unfreezing credit after May 30, 2024 and other miscellaneous expenses such as postage for contacting financial institutions.
• Medical monitoring: All class members can elect to receive two years of Kroll medical monitoring services, with an estimated value or $240 per year. Services include credit monitoring, dark web and medical identity scanning, fraud specialist access, identity theft restoration, and up to $1,000,000 in identity fraud loss reimbursement.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or mail the claim form included with their notice and mail it to the settlement administrator.

Settlement administrator's mailing address: Settlement Administrator – 83381, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391

The claim deadline is July 1, 2026.

Required claim information and proof

• Class member ID required to submit a claim online.
• Out-of-pocket losses claims require supporting documentation, which may include invoices, receipts, bank or credit card statements showing unreimbursed fees or fraudulent charges, police report and other proof of identity theft or fraud.

Payout options

• Electronic payment
• Paper check mailed to the address provided

$4 million data settlement fund

The $4,000,000 settlement fund will include:

• Settlement administration costs: To be determined
• Attorneys' fees: Up to $1,400,000
• Attorneys' expenses: To be presented to the court for approval at a later date
• Service awards to class representatives: Up to $2,000 each, $18,000 total
• Medical monitoring: Cost determined by the number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Deadline to file a claim: July 1, 2026
• Deadline to opt out: June 1, 2026
• Final approval hearing: July 1, 2026

When is the Illinois Bone and Joint Institute data breach settlement payout date?

Payments and medical monitoring information will be issued to approved claimants after the court grants final approval of the settlement and claim processing is completed.

Why did this class action settlement happen?

The class action lawsuit alleged that Illinois Bone and Joint Institute LLC failed to adequately protect personal information, resulting in a data breach discovered in July 2024. Plaintiffs claimed this led to potential exposure of sensitive personal and medical data belonging to current and former patients.

IBJI denied the allegations but agreed to settle to avoid the expense and risk of continued litigation and a possible trial.

Sources

1. Official class notice
2. Official settlement website FAQ page
3. Settlement agreement