A class action lawsuit has been filed against the University of Chicago Medicine, alleging that the institution failed to protect patients' private information during a data breach. The lawsuit claims that from Jan. 4 - Jan. 30, 2024, hackers accessed the network systems of UChicago Medicine, allegedly compromising sensitive personal and health information of thousands of patients. The plaintiffs argue that this breach has led to widespread misuse of the stolen data, causing significant harm including identity theft and fraud.
The complaint, filed by Sophia Hartley on behalf of all affected individuals, accuses UChicago Medicine of negligence, breach of contract, unjust enrichment, invasion of privacy, breach of fiduciary duty, and violation of the Illinois Consumer Fraud and Deceptive Business Practices Act. The plaintiffs seek monetary damages as well as injunctive relief to prevent further breaches.
The court filing details how UChicago Medicine allegedly failed to implement adequate cybersecurity measures despite being aware of the risks involved in handling such sensitive information. The plaintiffs also criticize the institution for not providing timely notification about the breach, which they claim exacerbated the damage caused.
The plaintiffs are represented by attorneys Ryan F. Stephan, James B. Zouras and Molly E. Stemper, of the firm of Stephan Zouras, of Chicago.